HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Teleflora
bd_0c58e797e3f39beb · schema v1 · pii pii-v1
Full breach record for Teleflora →Teleflora experienced an external system breach (hacking) on November 9, 2023, discovered on February 23, 2024. The incident affected 12,635 individuals, including 63 Maine residents. Compromised data included names and financial account or credit/debit card numbers (with security codes/PINs). Teleflora provided written notification on March 13, 2024, and offered one year of identity theft protection services through Equifax.
Leak gap clock⏱ Leak >90d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12,635 affectedView incident
A leak claim by akira about this victim predates this filing by 105 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0e58cbaf-cc13-4651-9595-3f508d6e7260.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2024
- Raw hash
- 85491e5e817595cd470b4dc202e1f4f79adbcd1517738383fb0aa9a66c18b956
Reporting entity
- Name
- Telefloranorm: teleflora
- Domain
- teleflora.com
Victim entity
- Name
- Telefloranorm: teleflora
- Domain
- teleflora.com
Incident
- Discovered
- Feb 23, 2024
- Materiality determined
- —
- Notification sent
- Mar 13, 2024
- Affected individuals
- 12,635
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 23, 2024→ Filed with AG: Mar 13, 202419d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.