Every public data breach

44 disclosed this week · 26,355 on record

Bombas

2 breaches81K affected in allRetailbombas.com

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

data_types2026-09-25
Bombas, 2019-06-06["payment-card","names","addresses","financial"]
data_types2026-09-25
Bombas, 2018-05-18["names","payment-card","financial","passwords"]
sector2026-09-25
Bombas, 2018-05-18retail
records_basis2026-09-25
Bombas, 2018-05-18organization
records2026-09-25
Bombas, 2018-05-1841000
source2026-09-25
Bombas, 2019-06-06https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2020.pdf
status2026-09-25
Bombas, 2019-06-06settled
fine_usd2026-09-25
Bombas, 2019-06-0665000
lawsuit2026-09-25
Bombas, 2019-06-06USD 65,000 NY AG penalty (June 2019)
sector2026-09-25
Bombas, 2019-06-06retail
data_types2026-09-25
Bombas, 2019-06-06["payment-card","names","addresses"]
records_basis2026-09-25
Bombas, 2019-06-06organization
records2026-09-25
Bombas, 2019-06-0639561
disclosed2026-09-25
Bombas, 2019-06-062019-06-06
summary2026-09-25
Bombas, 2019-06-06On September 27, 2014 intruders inserted card-stealing code into Bombas' Magento storefront; Bombas found it that November but did not fully remove it until February 2015 and failed to notify 39,561 consumers for over three years. It paid U
title2026-09-25
Bombas, 2019-06-06Card skimmer hit 39,561 customers, unnotified for 3 years; USD 65,000 NY AG penalty
domain2026-09-25
Bombasbombas.com
discovered2026-09-25
Bombas, 2018-05-182014-12-31
attack2026-09-25
Bombas, 2019-06-06hacking
discovered2026-09-25
Bombas, 2019-06-062018-12-26
disclosed2026-09-25
Bombas, 2018-05-182018-05-18
Added2026-09-25
Bombas, 2018-05-18
Added2026-09-25
Bombas, 2019-06-06
Added2026-09-25
Bombas