Bed, Bath and Beyond confirms another major data breach

American retail giant Bed, Bath & Beyond has suffered a data breach (opens in new tab), the company has confirmed in an 8-K filing to the U.S. Securities and Exchange Commission (SEC), albeit with somewhat conflicting statements.

In its filing, the company said that it discovered a successful phishing attack against one of its employees. The unknown threat actor managed to access a hard drive, as well as some shared drives, to which the affected employee had access.