HackingCustomer Data InvolvedIDENTITY_BASICCREDENTIALSBEHAVIORMediumActive
Arbonne International, LLC
bd_392ca32a8c55ec06 · schema v1 · pii pii-v1
Full breach record for Arbonne International, LLC →Arbonne International, LLC reported unauthorized access to internal systems on April 20, 2020. The incident potentially exposed names, addresses, usernames, passwords, and order history for 3,527 California residents. The company forced password resets, engaged third-party investigators, notified the FBI, and offered one year of identity monitoring through Kroll. The investigation was ongoing at the time of the notice.
California clockDiscovered Apr 20, 2020 → Notified Apr 24, 20204d ✓ CA 60-day OK5 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,527 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-190320
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2020
- Raw hash
- 79359f097920d5df0d9abbcf179a7ad183e8321ac4b2d72ffc5058d2c1617619
Reporting entity
- Name
- Arbonne International, LLCnorm: arbonne international
Victim entity
- Name
- Arbonne International, LLCnorm: arbonne international
Incident
- Discovered
- Apr 20, 2020
- Materiality determined
- —
- Notification sent
- Apr 24, 2020
- Affected individuals
- 3,527
- Data types
- IDENTITY_BASICCREDENTIALSBEHAVIOR
- Attack vector
- Unknown
- Regulator citations
- Reported this matter to the FBI and relevant regulators
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 4d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 20, 2020→ Notified: Apr 24, 20204d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.