Malware in the code of the e-commerce platform was identified and initially removed from their website.
They cannot determine which transactions were impacted.
They have been sending this notice to all of the approximately 41,000 customers who made a credit card purchase on our website during the period the malware may have existed until the day the identified malware was finally removed.
Source: https://www.databreaches.net/bombas-notifies-consumers-of-breach-going-back-to-2013/
"id": "BOM17491822",
"linkid": "bombas",
"type": "Malware",
"date": "05/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"