HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Teleflora

bd_2d425d5f59d7a5aa · schema v1 · pii pii-v1

Teleflora notified the NH Attorney General of a security incident discovered on Nov 10, 2023, where an unauthorized person accessed files containing PII of 54 NH residents. Notification letters and Equifax credit monitoring were sent on March 13, 2024.

Leak gap clock⏱ Leak >90d18 weeks discovery → filing

This filing is one of 3 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 105 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_e662bfd3b4753e61Montana State AGfiled 2024-03-13Candidate
bd_e87c0e8907f01949Indiana State AGfiled 2024-03-13Verified

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/teleflora-20240313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2024
Raw hash: a30d32a007a882c51c6e8ac45dbfdc3c0a567ebbf3e7f1ecb40d2d931fd11ecb

Reporting entity

Name: Teleflora
norm: teleflora
Domain: teleflora.com

Victim entity

Name: Teleflora
norm: teleflora
Domain: teleflora.com

Incident

Discovered: Nov 10, 2023
Materiality determined: Nov 29, 2023
Notification sent: Mar 13, 2024
Affected individuals: 54
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

Compliance

Time to disclose: 18 weeks(124 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.