DisclosureLens
UnknownLow

Rose & Clove Integrative Wellness

bd_17d8ba1cad3dcd09 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 9, 2025

Filed

Sep 11, 2025

To disclose

2 days

Affected

250

Confidence

95%
Full breach record for Rose & Clove Integrative Wellness

Rose & Clove Integrative Wellness reported a data breach to the Oregon Attorney General. The breach was reported on 2025-09-11. The breach occurred during 8/6/2025 - 8/6/2025, 9/9/2025 - 9/9/2025. The breach was discovered on 9/9/2025. 250 individuals were affected. Notice was sent on 9/9/2025.

Oregon clock OR AG ≤45d2 days discovery → filing
notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 34 days
discovery → filing · 2 days

Aug 6, 2025

Begins

Sep 9, 2025

Discovered

Sep 11, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed250 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.