Skip to content

Outdoor Smart!

Disclosed Dec 19, 20259 months ago19,864 affectedConfirmed

Official notice

What is known

People affected19,864 (as reported by the organization)
DisclosedDec 19, 2025
DiscoveredNov 3, 2025
HappenedFeb 15, 2024
AttackHacking
Data exposedPayment cards, Financial, Names
SectorRetail · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Outdoor Smart!oag.ca.gov · Official notice
Washington Attorney General breach notice: Outdoor Smart!atg.wa.gov · Official notice
Texas Attorney General data security breach report BR-0004777: Outdoor Smart!oag.my.site.com · Official notice
Vermont Attorney General: 2025-12-19 Outdoor Smart! Data Breach Notice to Consumersago.vermont.gov · Official notice
Indiana Attorney General 2025 data breach report: Outdoor Smartin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CADec 19, 2025
Washington AGresidents of WADec 19, 2025652
Vermont AGresidents of VTDec 19, 2025
Indiana AGresidents of INDec 19, 202554
Texas AGresidents of TXJan 71,363
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-12-19-outdoor-smart-data-breach-notice-consumers · backfill source
  • 2026-09-25 · sector: other to retail · backfill source
  • 2026-09-25 · data_types: [] to ["payment-card","financial","names"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 19864 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2025-11-03 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Outdoor Smart!

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.