Used Bikes Direct, LLC, an online retailer for pre-owned motorcycles and powersports equipment, has disclosed a data security incident through a supplemental filing with the Idaho Attorney General on May 20, 2025. This notification indicates new information or further details regarding a prior breach that affected the company’s customer data.
The information reportedly exposed in this breach includes Full Name, Email Address, Mailing Address, Phone Number, Payment Card Information, Financial Account Number, Purchase and Order History, and Password or Credential Hash. Such a combination of personal and financial data presents significant risks to individuals.
For those affected, the exposure of this sensitive information could lead to various forms of harm. Your Payment Card Information and Financial Account Numbers could be used for unauthorized transactions. Furthermore, your Full Name, Mailing Address, Phone Number, and Email Address make you a target for targeted phishing scams, identity theft, and other fraudulent activities. The compromised Password or Credential Hash could also put other online accounts at risk if you use similar login details.
Companies like Used Bikes Direct have a legal obligation to protect the sensitive data they collect from customers. When a data breach occurs, it often points to potential failures in their data security measures and protocols. If you received a notification letter from Used Bikes Direct, it indicates that your information was part of this incident.
Receiving a formal notification letter is your confirmation that your personal data was compromised. This may give you standing to explore legal options. Our firm is currently investigating potential class-action lawsuits related to the Used Bikes Direct data breach on behalf of affected individuals. There are no out-of-pocket costs to you for this investigation, as we work on a contingency fee basis.