HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedCredentialsLowContained

Dyson Corp.

bd_1eaf3ca8319749f2 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 13, 2020

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Dyson Corp. →3 incidents on file

Dyson, Inc. reported that a third party gained unauthorized access to user accounts on the Dyson US website (www.dyson.com) on July 31, 2020. The incident compromised account login details (credentials). No government-issued identification, financial, or medical information was involved. Dyson enhanced monitoring, detection capabilities, and security configurations to prevent recurrence and advised users to reset passwords.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 31, 2020

Begins

Aug 13, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Dyson Corp.
norm: dyson
Domain: dyson.com

Name: Dyson Corp.
norm: dyson
Domain: dyson.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jul 31, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Reviewing technical and organizational controls
Enhancing monitoring and detection capabilities across websites
Analyzing the behavior of the attack to build custom security configurations
Enhancing detection software to recognize and block unusual activity
Investigating rules to require additional verification for failed login attempts
Changes made: Enhancing monitoring and detection capabilities across websites
Strengthening ability to defend against sustained data breaches
Building custom security configurations to defend against repeat breaches
Enhancing detection software to recognize and block unusual activity
Investigating rules to require additional verification for failed login attempts
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-193035
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2020
Raw hash: 3da616f43b523156f9b16eb938a2c5d5134ba848a17e9700b581644167f91cc0

Reporting entityDyson Corp.

Victim entityDyson Corp.

IncidentUnauthorized Access

Stated responseReviewing technical and organizational controls

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov