Skip to content

FabFitFun

Disclosed May 25, 20206 years ago209,984 affectedConfirmed

Official notice

What is known

People affected209,984 (as reported by the organization)
DisclosedMay 25, 2020
DiscoveredAug 21, 2020
HappenedApr 26, 2020
AttackHacking
Data exposedNames, Credentials and tokens
SectorOther · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: FabFitFunoag.ca.gov · Official notice
Washington Attorney General breach notice: FabFitFunatg.wa.gov · Official notice
Notice letter filed with the Delaware DOJ: FabFitFunattorneygeneral.delaware.gov · Official notice
Oregon DOJ breach notice: FabFitFunjustice.oregon.gov · Official notice
Indiana Attorney General 2020 data breach report: FabFitFunin.gov · Official notice

Notices filed

WhereFiledPeople
Indiana AGresidents of INMay 25, 202017
Delaware DOJresidents of DESep 15, 20203,287
Indiana AGresidents of INSep 15, 20202,065
California AGresidents of CASep 18, 2020
Washington AGresidents of WASep 18, 202011,094
Oregon DOJresidents of ORSep 18, 2020209,984
History of this record
  • 2026-09-25 · disclosed: 2020-09-15 to 2020-05-25 · backfill source
  • 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 209984 · backfill source
  • 2026-09-25 · disclosed: 2020-09-18 to 2020-09-15 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2020-08-21 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about FabFitFun

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.