Bimbo Bakeries USA Data Breach Exposes Social Security Numbers

Published
September 8, 2026
Updated
September 8, 2026
Bimbo Bakeries USA Data Breach Exposes Social Security Numbers
Bimbo Bakeries
Affected by the data breach? You may be entitled to compensation. Submit a claim today.

Bimbo Bakeries USA, the largest commercial baking company in the United States and a subsidiary of Grupo Bimbo, disclosed a data breach connected to a security vulnerability in software provided by its third-party vendor, Oracle.

Bimbo Bakeries USA discovered the breach on Dec. 6, 2025. The breach stemmed from a zero-day vulnerability in Oracle's E-Business Suite application.

Upon learning of the vulnerability, Bimbo Bakeries applied security patches provided by Oracle to address the flaw and launched an investigation. The investigation confirmed that unauthorized parties had acquired files from the Oracle E-Business Suite application by exploiting the vulnerability.

The company then conducted a comprehensive review to determine what personal information was contained in the compromised files. The review was completed on Aug. 19, 2026, when the company identified specific files containing the personal information of affected individuals.

The types of personal information exposed in the breach included names, Social Security numbers and financial information such as bank account numbers and credit or debit card numbers.

So far, the incident has impacted 3,982 Texas residents and 363 Massachusetts residents.

The breach was also reported to the California Attorney General. The company began notifying affected individuals by U.S. Mail on Aug. 31, 2026.

Bimbo Bakeries USA's response to the breach

Bimbo Bakeries is offering affected individuals 12 months of free credit monitoring services. The services include single bureau credit monitoring, a single bureau credit report and a single bureau credit score

Affected individuals can enroll in the monitoring services by visiting Cyberscout's activation page and entering the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Bimbo Bakeries USA has also established a dedicated call center for individuals with questions about the incident. The number is 1-833-851-8839, and representatives are available Monday through Friday, between 8 a.m. and 8 p.m. Eastern Time, excluding major U.S. holidays.

Bimbo Bakeries USA can also be reached by mail at 255 Business Center Drive, Horsham, PA 19044, or by phone at 1-800-984-0989.

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Bimbo Bakeries
Consumers Notification date
Date of Breach
August 9, 2025
Breach Discovered Date
Total People Affected
Information Types Exposed
  • Name of individual
  • Social Security Number Information
  • Financial Information (e.g. account number, credit or debit card number)
  • Financial Account
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image