HackingTargetedPCIIDENTITY_BASICLowContained
Lulu's Fashion Lounge
bd_3021ba4889609053 · schema v1 · pii pii-v1
Full breach record for Lulu's Fashion Lounge →Lulu's Fashion Lounge, Inc. notified customers of a data breach affecting payment card information. Unauthorized access occurred between August 11 and August 16, 2016. Affected data included names, billing addresses, and payment card details. The company engaged forensic investigators and implemented system safeguards.
California clockDiscovered Aug 23, 2016 → Notified Sep 13, 201621d ✓ CA 60-day OK24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_64630f2a60519789New Hampshire State AGfiled 2016-09-16Verified
- bd_ab508a8df133c2aeMontana State AGfiled 2016-09-16Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-63911
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2016
- Raw hash
- 8bab1caf1f1d63804c9ba2622e03eb8420ff7b23288e2a889ad2f7ccdc3ff60d
Reporting entity
- Name
- Lulu's Fashion Loungenorm: lulu s fashion lounge
Victim entity
- Name
- Lulu's Fashion Loungenorm: lulu s fashion lounge
Incident
- Discovered
- Aug 23, 2016
- Materiality determined
- —
- Notification sent
- Sep 13, 2016
- Affected individuals
- Not disclosed
- Data types
- PCIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 23, 2016→ Notified: Sep 13, 201621d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.