BED BATH & BEYOND, INC.

Bed Bath & Beyond Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-06. 1 Massachusetts residents were affected. The report records the breach type as paper.

Bed Bath & Beyond Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-02-28. 7 Massachusetts residents were affected. The report records the breach type as paper.

Bed Bath & Beyond Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2019-12-23 and was reported on 2020-02-26. 1 Indiana residents were affected. 2,995 individuals affected in total.

Bed Bath & Beyond Inc. disclosed that a third party used email and password information acquired outside the company to access a limited number of online accounts between September 4 and September 27, 2019. Security Challenge Questions and Answers may have been visible. Payment cards were not compromised. The company conducted an internal investigation, retained a forensics firm, and implemented enhanced security measures. Affected customers were advised to reset passwords and change security questions.

Bed Bath & Beyond notified the NH AG of a potential insider threat involving one call center employee who may have attempted to illegally compromise customer credit card information. The incident occurred between June 19, 2018, and March 26, 2019. The employee was terminated and legal action is being taken. Notifications were sent to 346 individuals, including 2 NH residents, offering one year of credit monitoring.

Bed Bath & Beyond Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-03. 7 Massachusetts residents were affected. The report records the breach type as paper.

Bed Bath & Beyond Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-02-26. 4 Massachusetts residents were affected. The report records the breach type as paper.

Bed Bath & Beyond notified Montana residents that personnel documents, including SSNs and driver's license numbers, were inadvertently discarded during a store remodel in Denver. No evidence of misuse was found. Credit monitoring was offered.

Bed Bath & Beyond notified the NH AG of an insider threat where a call center employee illegally compromised credit card info for 139 customers between Nov 21 and Dec 8, 2017. The employee was terminated, legal action is pending, and credit monitoring was offered.

Bed Bath & Beyond Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-12-26. 6 Massachusetts residents were affected. The report records the breach type as paper.

Bed Bath & Beyond Inc. filed a data breach notification with the California Attorney General. The filing lists the date of the breach as May 15, 2017. The attached consumer notification letter is empty/redacted in the provided source, so no further details regarding the nature of the breach, data types affected, or number of individuals impacted are available for extraction.

Bed Bath & Beyond, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-06-09. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Bed Bath & Beyond, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-11-14. 4 Massachusetts residents were affected. The report records the breach type as electronic.

Bed Bath & Beyond Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-09-24. 7 Massachusetts residents were affected. The report records the breach type as electronic.

Bed Bath & Beyond Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-10-23. 11 Massachusetts residents were affected. The report records the breach type as undefined.