HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Christian Dior Couture SAS
bd_3990d88907e23e27 · schema v1 · pii pii-v1
Full breach record for Christian Dior Couture SAS →Christian Dior Couture SAS notified California residents of a data breach where an unauthorized party accessed a client database on January 26, 2025. The incident was discovered on May 7, 2025. Affected data includes names, contact info, dates of birth, and government IDs (including SSNs in some cases). No payment data was involved. Dior engaged third-party experts, notified law enforcement, and contained the incident. 24 months of credit monitoring is offered.
California clockDiscovered May 7, 2025 → Notified Jul 18, 202572d ✗ CA 60-day late10 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_06928ec5a1bbc596Washington State AGfiled 2025-07-18Candidate
- bd_128ca2cb188780d9Indiana State AGfiled 2025-07-18Verified
- bd_e4909a3b5a1f1885Oregon State AGfiled 2025-07-18Verified
- bd_1bf5e0c2136c5c48Texas State AGfiled 2025-07-22(4d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-605648
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2025
- Raw hash
- 8f6e14172253c381f4d4c142edea1915a299233fafb08aac0c2beff1e512e516
Reporting entity
- Name
- Christian Dior Couture SASnorm: christian dior couture sas
- Domain
- dior.com
Victim entity
- Name
- Christian Dior Couture SASnorm: christian dior couture sas
- Domain
- dior.com
Incident
- Discovered
- May 7, 2025
- Materiality determined
- —
- Notification sent
- Jul 18, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- CA 60-day late · 72d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 7, 2025→ Notified: Jul 18, 202572d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.