Bed Bath & Beyond Inc. disclosed that a third party used email and password information acquired outside the company to access a limited number of online accounts between September 4 and September 27, 2019. Security Challenge Questions and Answers may have been visible. Payment cards were not compromised. The company conducted an internal investigation, retained a forensics firm, and implemented enhanced security measures. Affected customers were advised to reset passwords and change security questions.