HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Teleflora

bd_2d425d5f59d7a5aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 10, 2023

Filed

Mar 13, 2024

To disclose

18 weeks

Affected

54state residents only

Linked

7 filings

Confidence

66%

Full breach record for Teleflora →

Teleflora notified the NH Attorney General of a security incident discovered on Nov 10, 2023, where an unauthorized person accessed files containing PII of 54 NH residents. Notification letters and Equifax credit monitoring were sent on March 13, 2024.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d18 weeks discovery → filing

Incident timeline

discovery → filing · 18 weeks / 124 days

Nov 10, 2023

Discovered

Nov 29, 2023

Scope determined

Mar 13, 2024

Filed

vs. sector median

+10 wks slower

This filing is one of 7 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 105 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_c6736a518487ed4d2023-11-29 · +105dVerified by operator

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_0c58e797e3f39beb2024-03-13Candidate
Massachusetts State AGbd_4c702f27694c09af2024-03-13Verified by operator
California State AGbd_8eba6c47eb70be882024-03-13Verified
Montana State AGbd_e662bfd3b4753e612024-03-13Verified

Show 1 more filing ↓

Indiana State AGbd_e87c0e8907f019492024-03-13Verified

Name: Teleflora
norm: teleflora
Domain: teleflora.com

Name: Teleflora
norm: teleflora
Domain: teleflora.com
Industry: Retail & Consumerllm

Discovered: Nov 10, 2023
Materiality determined: Nov 29, 2023
Notification sent: Mar 13, 2024
Affected individuals: 54state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Took steps to contain the activity
Launched an investigation
Completed a manual review of the files
Began mailing notification letters to the New Hampshire residents via First Class mail
Providing 12 months of complimentary credit monitoring through Equifax
Established a dedicated, toll-free call center
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(124 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGMar 13 · first

Massachusetts State AGMar 13 · first

California State AGMar 13 · first

Montana State AGMar 13 · first

Indiana State AGMar 13 · first

New Hampshire State AGMar 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/teleflora-20240313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2024
Raw hash: a30d32a007a882c51c6e8ac45dbfdc3c0a567ebbf3e7f1ecb40d2d931fd11ecb

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityTeleflora

Victim entityTeleflora

Incidentdiscovered Nov 10, 2023

Stated responseTook steps to contain the activity

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov