HackingIdentity (basic)LowContained

Francesca's Acquisition, LLC

bd_22858389bdbdb2bd · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 31, 2023

Filed

Sep 25, 2023

To disclose

34 weeks

Affected

344state residents only

Linked

10 filings

Confidence

67%

Full breach record for Francesca's Acquisition, LLC →

New Hampshire Attorney General notification regarding a data security incident at Francesca’s Acquisition, LLC. The company discovered a potential network disruption on January 31, 2023. Following an investigation, it was determined that information for 344 New Hampshire residents was potentially impacted. The company engaged forensic investigators and provided notice to the AG and affected individuals on September 25, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 34 weeks / 237 days

Jan 31, 2023

Discovered

Sep 25, 2023

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Maine State AGbd_200c243333239c202023-09-25Candidate
Vermont State AGbd_723d481b8bee5beb2023-09-25Verified
Montana State AGbd_7d7745dc9785e0482023-09-25Verified by operator
Indiana State AGbd_92b435079e5e007c2023-09-25Verified

Show 5 more filings ↓up to 1d gap

Oregon State AGbd_a53d9dc745012e3a2023-09-25Verified
California State AGbd_e88f10465d70bfb82023-09-25Verified
Washington State AGbd_f0c86345edca80fc2023-09-25Verified by operator
Massachusetts State AGbd_799e853f809267fd2023-09-26 · +1dVerified
South Carolina State AGbd_db3340a463b185c12023-09-26 · +1dVerified

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: Francesca's Acquisition, LLC
norm: francesca s acquisition

Discovered: Jan 31, 2023
Materiality determined: —
Notification sent: Sep 25, 2023
Affected individuals: 344state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: provided notification to the Office of the Attorney General Consumer Protection Bureau

During the incident: Engaged a third-party team of forensic investigators
Took steps to secure its systems
Undertook a meticulous review of the potentially impacted information with the assistance of a third-party data review team
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(237 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Maine State AGSep 25 · first

Vermont State AGSep 25 · first

Montana State AGSep 25 · first

Indiana State AGSep 25 · first

Oregon State AGSep 25 · first

California State AGSep 25 · first

Washington State AGSep 25 · first

New Hampshire State AGSep 25 · first · this page

Massachusetts State AG+1d

South Carolina State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/francescas-acquisition-20230925.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2023
Raw hash: e0b9e2bc16e4cda360ced0f24b6246fa7c0202cc3278610df2451fddff83c633

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityCipriani & Werner

Victim entityFrancesca's Acquisition, LLC

Incidentdiscovered Jan 31, 2023

Stated responseEngaged a third-party team of forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov