HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Charmant

bd_1edfaa86e98890bb · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 29, 2023

To disclose

—

Affected

Not disclosed

Linked

4 records

Confidence

66%

Full breach record for Charmant →

Charmant USA notified residents of multiple states of a data breach involving unauthorized access to personal information. The notification provides guidance on credit monitoring, fraud alerts, and security freezes, indicating the compromise of identity-related data.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Nov 29, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 4 records about the same incident.View merged incident

A leak claim by play about this victim was first seen 56 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_b1e529abcc15db652023-10-04 · +55dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_320738bd949fd2e12023-11-29Verified by operator
Montana State AGbd_5f4750f7543feab72023-11-29Verified

Name: Charmant
norm: charmant
Domain: charmant.com

Name: Charmant
norm: charmant
Domain: charmant.com
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: Nov 29, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Remind you it is always advisable to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity
Contact information for the three nationwide credit reporting companies is provided
Contact information for the Federal Trade Commission is provided
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 29 · first

Montana State AGNov 29 · first

New Hampshire State AGNov 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/charmant-usa-20231129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2023
Raw hash: 815a595f712e9b24426cd638b1e69ecdd9c5f3c03d47fba3e3a78394717d0fbe

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityCharmant

Victim entityCharmant

IncidentUnauthorized Access

Stated responseRemind you it is always advisable to be vigilant for incidents of fraud or identity theft by reviewing your account statements and free credit reports for any unauthorized activity

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov