Bombas

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

• 2026-09-25 · Bombas, 2019-06-06 · data_types: ["payment-card","names","addresses","financial"]
• 2026-09-25 · Bombas, 2018-05-18 · data_types: ["names","payment-card","financial","passwords"]
• 2026-09-25 · Bombas, 2018-05-18 · sector: retail
• 2026-09-25 · Bombas, 2018-05-18 · records_basis: organization
• 2026-09-25 · Bombas, 2018-05-18 · records: 41000
• 2026-09-25 · Bombas, 2019-06-06 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2020.pdf
• 2026-09-25 · Bombas, 2019-06-06 · status: settled
• 2026-09-25 · Bombas, 2019-06-06 · fine_usd: 65000
• 2026-09-25 · Bombas, 2019-06-06 · lawsuit: USD 65,000 NY AG penalty (June 2019)
• 2026-09-25 · Bombas, 2019-06-06 · sector: retail
• 2026-09-25 · Bombas, 2019-06-06 · data_types: ["payment-card","names","addresses"]
• 2026-09-25 · Bombas, 2019-06-06 · records_basis: organization
• 2026-09-25 · Bombas, 2019-06-06 · records: 39561
• 2026-09-25 · Bombas, 2019-06-06 · disclosed: 2019-06-06
• 2026-09-25 · Bombas, 2019-06-06 · summary: On September 27, 2014 intruders inserted card-stealing code into Bombas' Magento storefront; Bombas found it that November but did not fully remove it until February 2015 and failed to notify 39,561 consumers for over three years. It paid U
• 2026-09-25 · Bombas, 2019-06-06 · title: Card skimmer hit 39,561 customers, unnotified for 3 years; USD 65,000 NY AG penalty
• 2026-09-25 · Bombas · domain: bombas.com
• 2026-09-25 · Bombas, 2018-05-18 · discovered: 2014-12-31
• 2026-09-25 · Bombas, 2019-06-06 · attack: hacking
• 2026-09-25 · Bombas, 2019-06-06 · discovered: 2018-12-26
• 2026-09-25 · Bombas, 2018-05-18 · disclosed: 2018-05-18
• 2026-09-25 · Bombas, 2018-05-18 · added
• 2026-09-25 · Bombas, 2019-06-06 · added
• 2026-09-25 · Bombas · added