Filters Fast

Disclosed Aug 14, 2020323,000 affectedSettled

Checkout skimmer ran for nearly a year, hitting 320,000 customers; USD 200,000 NY AG

Attackers skimmed card data from Filters Fast's online checkout for purchases between July 16, 2019 and July 10, 2020, affecting about 320,000 consumers. The retailer paid New York USD 200,000.

What is known

People affected	323,000 (as reported by the organization)
Disclosed	Aug 14, 2020
Discovered	Jul 20, 2020
Happened	Jul 19, 2019
Attack	Hacking
Data exposed	NamesCredentials and tokensPayment cardsAddressesFinancial
Sector	Retail · US
Status	Settled
Lawsuit or fine	USD 200,000 NY AG agreement (May 2021) (about $200K)

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Filters Fast

Official noticeatg.wa.gov

Washington Attorney General breach notice: Filters Fast

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Filters Fast

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Filters Fast

Regulatorag.ny.gov

NY AG: Agreement with Filters Fast after 2019 data breach

Official noticein.gov

Indiana Attorney General 2020 data breach report: Filters Fast

Official noticemaine.gov

Maine Attorney General breach notice archive: Filters Fast

Notices filed

Residents of CAAug 14, 2020

California AGCount not stated

Residents of WAAug 14, 2020

Washington AG6,584 people

Residents of ORAug 14, 2020

Oregon DOJ323,000 people

Residents of INAug 14, 2020

Indiana AG7,050 people

Residents of MEAug 14, 2020

Maine AG1,177 people

Residents of DEAug 27, 2020

Delaware DOJ1,492 people

TotalMay 18, 2021

Research320,000 people

History of this record

data_types2026-09-25

["names","credentials","payment-card","addresses"] to ["names","credentials","payment-card","addresses","financial"]by backfillSource

records2026-09-25

320000 to 323000by backfillSource

status2026-09-25

confirmed to settledby seedSource

fine_usd2026-09-25

empty to 200000by seedSource

lawsuit2026-09-25

empty to USD 200,000 NY AG agreement (May 2021)by seedSource

sector2026-09-25

other to retailby seedSource

data_types2026-09-25

["names","credentials"] to ["names","credentials","payment-card","addresses"]by seedSource

records2026-09-25

323000 to 320000by seedSource

summary2026-09-25

empty to Attackers skimmed card data from Filters Fast's online checkout for purchases between July 16, 2019 and July 10, 2020, affecting about 320,000 consumers. The retailer paid New York USD 200,000.by seedSource

title2026-09-25

empty to Checkout skimmer ran for nearly a year, hitting 320,000 customers; USD 200,000 NY AGby seedSource

data_types2026-09-25

[] to ["names","credentials"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 323000by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2020-07-20by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Filters Fast