HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained

Hanna Andersson LLC

bd_1ff7c79f9d982a9a · schema v1 · pii pii-v1

Full breach record for Hanna Andersson LLC →

Hanna Andersson, LLC notified customers of unauthorized access to website purchase data between Sept 16 and Nov 11, 2019. Affected data included names, addresses, and full payment card details (number, CVV, expiration). The company secured the platform, engaged forensic experts, and offered 12 months of identity theft protection.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_4998136c4f4f4bceCalifornia State AGfiled 2020-01-15Candidate

Source provenance

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2020/HannaAndersson.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 15, 2020
Raw hash: b497d175e8b53a4678f0591aa4aab7ab653f204e54bc43f93025394b4c940a50

Reporting entity

Name: Hanna Andersson LLC
norm: hanna andersson
Domain: hannaandersson.com
Industry: Retail

Victim entity

Name: Hanna Andersson LLC
norm: hanna andersson
Domain: hannaandersson.com
Industry: Retail

Incident

Discovered: Nov 11, 2019
Materiality determined: —
Notification sent: Jan 15, 2020
Affected individuals: Not disclosed
Data types: IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Cooperating with law enforcement
Initial access: exploit_public_facing

Compliance

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.