HackingStolen CredentialsCustomer Data InvolvedCREDENTIALSLowContained
Niche.com Inc.
bd_2a2b58c80c2f9886 · schema v1 · pii pii-v1
Full breach record for Niche.com Inc. →Niche.com Inc. disclosed that on July 24, 2019, it discovered an automated attack against its website login point. The attacker used username and password pairs from externally available sources to attempt to gain access to user accounts. Successful logins were detected for certain users, leading Niche to lock accounts and prompt password resets. The incident involved credentials (usernames and passwords). Niche implemented heightened monitoring and employee training as remediation.
California clockDiscovered Jul 24, 2019 → Notified Aug 16, 201923d ✓ CA 60-day OK27 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-149877
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2019
- Raw hash
- 73719272e77f2c9447afc107580f481f916f2382f9afd768fcb7739e8ad7d82c
Reporting entity
- Name
- Niche.com Inc.norm: nichecom
- Domain
- niche.com
Victim entity
- Name
- Niche.com Inc.norm: nichecom
- Domain
- niche.com
Incident
- Discovered
- Jul 24, 2019
- Materiality determined
- —
- Notification sent
- Aug 16, 2019
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 23d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 24, 2019→ Notified: Aug 16, 201923d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.