Latest / California / April 2018

Hudson’s Bay Company

Hudson’s Bay Company notified California AG on Apr 27, 2018 of a data breach. Data exposed: Social Security number, Financial / bank account, Health insurance, Name.

All 2 filings by Hudson’s Bay Company, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Hudson’s Bay Company
Source
California AG · source record
Date reported
Apr 27, 2018
Date(s) of breach
n/a
Residents affected
Not published by this source
Data exposed
Social Security number Financial / bank account Health insurance Name
Notice letter
Sample notice (PDF)
Discovered
Apr 27, 2018, as stated in the letter
"Letter from Our CEO April 27, 2018 NOTICE OF DATA BREACH To Our Valued Customers, As we previously shared, we recently became aware of a data security issue involving customer payment card data at Saks Fifth Avenue, Saks OFF 5TH and Lord..."
Days to notice
0 days from discovery (Apr 27, 2018) to the California record (Apr 27, 2018). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Offered in the letter
credit or identity monitoring through Experian
First seen by BreachTally
2026-10-30 16:15 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:15 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Hudson’s Bay Company

OrganizationSourceStateReportedResidents affectedData exposed
Hudson's Bay Company Oregon DOJ OR May 3, 2018 Not published Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.