Outdoor Smart! Inc., operating as Campfire Collective, experienced a data breach between February 15, 2024, and November 4, 2025. Unauthorized malicious code on the Campfire Collective website captured payment card details and potentially other personally identifiable information. The company officially confirmed the breach on December 4, 2025.
The breach affected an estimated 19,864 individuals. Exposed data types included names, payment card numbers, expiration dates, CVCs, card types, dates of birth, addresses, government IDs, medical information, and financial information. Some information types that were affected have not yet been disclosed. Notifications were sent to residents in multiple U.S. states, and the company also notified the Attorney Generals in California, Maine, Massachusetts, Washington, and Vermont in December 2025.
Details about data breaches can emerge over time, and consumer notices may be delayed. Individuals are advised to review notices from the company and monitor their financial accounts.