Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Bombas

Disclosed May 18, 201841,000 affectedConfirmed

Official notice

What is known

People affected41,000 (as reported by the organization)
DisclosedMay 18, 2018
DiscoveredDec 31, 2014
HappenedSep 27, 2014
AttackNot stated
Data exposedNamesPayment cardsFinancialPasswords
SectorRetail · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Bombas
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Bombas
Official noticein.gov
Indiana Attorney General 2018 data breach report: Bombas
Official noticemaine.gov
Maine Attorney General breach notice archive: Bombas

Notices filed

Residents of CAMay 18, 2018
California AGCount not stated
Residents of ORMay 18, 2018
Oregon DOJ41,000 people
Residents of INMay 21, 2018
Indiana AG771 people
Residents of CAAug 31, 2018
California AGCount not stated
Residents of MEAug 31, 2018
Maine AG175 people

Other breaches at Bombas

Card skimmer hit 39,561 customers, unnotified for 3 years; USD 65,000 NY AG penaltyHacking exposed payment cards, names, addresses and financial details. Reported to the California AG.Hacking40K affectedRetailUSJun 6, 2019
History of this record
data_types2026-09-25
[] to ["names","payment-card","financial","passwords"]by backfillSource
sector2026-09-25
other to retailby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 41000by backfillSource
discovered2026-09-25
empty to 2014-12-31by backfillSource
disclosed2026-09-25
2018-08-31 to 2018-05-18by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Bombas