Bimbo Bakeries USA
Aug 2025 · Graded Verified · Manufacturing · Government record
Incident summary
Bimbo Bakeries USAAug 2025
Not yet quantified
VVerifiedAn unauthorized party gained remote access to a portion of Bimbo Bakeries' network in February 2024, reaching a single server holding names, Social Security numbers, and dates of birth for 560 employees and vendors. The filing does not say how they got in or what else they touched. Medusa claims credit and a $6.5 million ransom, unconfirmed by Bimbo; the server didn't care whose name was on the note. One server was the whole perimeter for every employee and vendor record it held.
Manufacturing
California AG breach notification
Initial attack type third-party or supply chain inferred · Impact data theft confirmed + data extortion · Actor Medusa
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.