Shutterfly

Disclosed Mar 27, 20188 years ago9,428 affectedConfirmed

Official notice

What is known

People affected	9,428 (as reported by the organization)
Disclosed	Mar 27, 2018
Happened	Jan 11, 2018
Attack	Not stated
Data exposed	Not stated
Sector	Other · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: Shutterflyoag.ca.gov · Official notice	Official notice
Indiana Attorney General 2018 data breach report: Shutterflyin.gov · Official notice	Official notice

Notices filed

Where	Filed	People
Indiana AGresidents of IN	Mar 27, 2018	13
California AGresidents of CA	Mar 28, 2018

Other breaches at Shutterfly

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Dec 18, 2021Dec 18, 20214 years agoRansomware	Dec 18, 20214 years ago	Ransomware	Healthcare	Confirmed	53K
Disclosed Nov 26, 2014Nov 26, 201411 years ago	Nov 26, 201411 years ago	Not stated	Other	Confirmed	Unknown

History of this record

2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 9428 · backfill source
2026-09-25 · disclosed: 2018-03-28 to 2018-03-27 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Shutterfly

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.