HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICCREDENTIALSLowContained
Eileen Fisher, Inc.
bd_38e61c74258cc867 · schema v1 · pii pii-v1
Full breach record for Eileen Fisher, Inc. →Eileen Fisher, Inc. notified consumers of unauthorized access to employee email accounts between July 2, 2021, and October 19, 2021. The breach may have exposed names and other data elements. The company secured its network, engaged third-party specialists, reported to law enforcement, and offered 24 months of identity monitoring services.
Vermont clock✗ VT AG >45 bday17 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_47b3cd5e1910fe75New Hampshire State AGfiled 2023-03-06(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-01-eileen-fisher-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2023
- Raw hash
- a31f04ca5edcd314cb994d3f7cbd3e9c49216ad65006afa3f756c2734592b0fc
Reporting entity
- Name
- Eileen Fisher, Inc.norm: eileen fisher
Victim entity
- Name
- Eileen Fisher, Inc.norm: eileen fisher
Incident
- Discovered
- Oct 14, 2021
- Materiality determined
- —
- Notification sent
- Mar 1, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement and are cooperating with their investigationNotified applicable regulatory authorities, as required by law
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 months(503 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.