HackingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Rachas, Inc
bd_135d90567a0a67ab · schema v1 · pii pii-v1
Full breach record for Rachas, Inc →Rachas, Inc. d/b/a Chuze Fitness experienced a cybersecurity attack on November 27, 2023, where an unauthorized party gained access to its network. The incident involved the potential exposure of employees' names, mailing addresses, and Social Security Numbers. The company shut off network access, engaged forensic investigators, and secured the environment. Affected employees are offered 12 months of credit monitoring and fraud assistance.
California clockDiscovered Nov 27, 2023 → Notified Jan 18, 202452d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_46e0c9f7412bde61Montana State AGfiled 2024-01-19Verified
- bd_441ad4fcd76e860eIndiana State AGfiled 2024-01-18(1d gap)Verified
- bd_b0db8010d479adabNew Hampshire State AGfiled 2024-01-18(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-579619
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 19, 2024
- Raw hash
- c33df58c14b531338dcb8d89e6b8c065186e084376cd546f5e2d4d11eb7252e7
Reporting entity
- Name
- Rachas, Incnorm: rachas
Victim entity
- Name
- Rachas, Incnorm: rachas
Incident
- Discovered
- Nov 27, 2023
- Materiality determined
- —
- Notification sent
- Jan 18, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 52d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 27, 2023→ Notified: Jan 18, 202452d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.