North 40 Outfitters
Disclosed Feb 23, 20188 years ago18,957 affectedConfirmed
What is known
| People affected | 18,957 (as reported by the organization) |
|---|---|
| Disclosed | Feb 23, 2018 |
| Discovered | Dec 14, 2018 |
| Happened | Feb 2, 2018 |
| Attack | Hacking |
| Data exposed | Names, Payment cards, Financial |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: North 40 Outfittersoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: North 40 Outfittersatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: North 40 Outfittersjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2019 data breach report: North 40 Outfittersin.gov · Official notice | Official notice |
| Indiana Attorney General 2018 data breach report: North 40 Outfittersin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: North 40 Outfittersmaine.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: North 40 Outfittersmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Feb 23, 2018 | |
| Washington AGresidents of WA | Feb 23, 2018 | 2,671 |
| Oregon DOJresidents of OR | Feb 23, 2018 | 14,734 |
| Indiana AGresidents of IN | Feb 23, 2018 | 194 |
| Maine AGresidents of ME | Mar 13, 2018 | 3 |
| California AGresidents of CA | Feb 14, 2019 | |
| Washington AGresidents of WA | Feb 14, 2019 | 2,632 |
| Oregon DOJresidents of OR | Feb 14, 2019 | 18,957 |
| Indiana AGresidents of IN | Feb 14, 2019 | 255 |
| Maine AGresidents of ME | Feb 14, 2019 | |
| Maine AGresidents of ME | Apr 25, 2019 | 10 |
History of this record
- 2026-09-25 · source: empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%2012-6-2018%20through%209-14-2020%20REDACTED.xlsx · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","payment-card","financial"] · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2018.pdf · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 18957 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2018-12-14 · backfill source
- 2026-09-25 · disclosed: 2019-02-14 to 2018-02-23 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.