Filters Fast
Disclosed Aug 14, 20206 years ago323,000 affectedSettled
Checkout skimmer ran for nearly a year, hitting 320,000 customers; USD 200,000 NY AG
Attackers skimmed card data from Filters Fast's online checkout for purchases between July 16, 2019 and July 10, 2020, affecting about 320,000 consumers. The retailer paid New York USD 200,000.
What is known
| People affected | 323,000 (as reported by the organization) |
|---|---|
| Disclosed | Aug 14, 2020 |
| Discovered | Jul 20, 2020 |
| Happened | Jul 19, 2019 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens, Payment cards, Addresses, Financial |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | USD 200,000 NY AG agreement (May 2021) (about $200K) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Filters Fastoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Filters Fastatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Filters Fastattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Filters Fastjustice.oregon.gov · Official notice | Official notice |
| NY AG: Agreement with Filters Fast after 2019 data breachag.ny.gov · Regulator | Regulator |
| Indiana Attorney General 2020 data breach report: Filters Fastin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Filters Fastmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 14, 2020 | |
| Washington AGresidents of WA | Aug 14, 2020 | 6,584 |
| Oregon DOJresidents of OR | Aug 14, 2020 | 323,000 |
| Indiana AGresidents of IN | Aug 14, 2020 | 7,050 |
| Maine AGresidents of ME | Aug 14, 2020 | 1,177 |
| Delaware DOJresidents of DE | Aug 27, 2020 | 1,492 |
| Researchtotal | May 18, 2021 | 320,000 |
History of this record
- 2026-09-25 · data_types: ["names","credentials","payment-card","addresses"] to ["names","credentials","payment-card","addresses","financial"] · backfill source
- 2026-09-25 · records: 320000 to 323000 · backfill source
- 2026-09-25 · status: confirmed to settled · seed source
- 2026-09-25 · fine_usd: empty to 200000 · seed source
- 2026-09-25 · lawsuit: empty to USD 200,000 NY AG agreement (May 2021) · seed source
- 2026-09-25 · sector: other to retail · seed source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","payment-card","addresses"] · seed source
- 2026-09-25 · records: 323000 to 320000 · seed source
- 2026-09-25 · summary: empty to Attackers skimmed card data from Filters Fast's online checkout for purchases between July 16, 2019 and July 10, 2020, affecting about 320,000 consumers. The retailer paid New York USD 200,000. · seed source
- 2026-09-25 · title: empty to Checkout skimmer ran for nearly a year, hitting 320,000 customers; USD 200,000 NY AG · seed source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 323000 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2020-07-20 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.