By design
bd_39f315c7eabae5db · schema v1 · pii pii-v1
Full breach record for By design →2 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Meow on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
<p>Dear customers!<\/p><p>We are thrilled to present you with exclusive access to over 550 GB of confidential data from By Design LLC, a premier fashion company established in 1994. By Design is dedicated to empowering women with stylish, comfortable, and affordable clothing through its unique brands, each catering to different styles and occasions. Their contemporary collections feature jackets, tops, knits, skirts, pants, and dresses, designed to create an effortless and glamorous look.<\/p><p>By Design s brands include:<\/p><p>Love By Design: A contemporary junior line featuring a mix of fresh trends and classic looks with vibrant colors and prints, suitable for any occasion.<br>Madison Michelle: Elegant and stylish options for special occasions.<br>Rich and Famous: A lifestyle brand focused on sustainable fashion.<br>Carolyn Taylor: High quality sweaters with classic elements like cable knit patterns and ribbed trims.<br>Watermelon Sugar: Casual and fun clothing that embodies a laid back vibe.<\/p><p>The company prioritizes responsible sourcing and sustainability, conducting annual reviews of manufacturing partners to ensure they adhere to environmental and ethical standards. By Design s executive team brings extensive experience in the apparel and retail industries, driving the company s success through strategic guidance and leadership.<\/p><p>This comprehensive data pack includes:<\/p><p>Employee data<br>Client information<br>Scanned payment documents<br>Personal data including dates of birth and scans of driver s licenses<br>Business proposals and audit results<br>Internal financial documents<br>Agreements and certificates<br>And much more<br>These records provide valuable insights into By Design s operations and may be of significant interest to fashion industry professionals, business analysts, and other stakeholders.<\/p><p>To gain access to this exclusive
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Oct 23, 2024
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
meow
According to ransomware.live, Meow emerged in 2022 (resurfacing aggressively in 2024), initially operating as a RaaS using the Conti v2 codebase before transitioning to a data-extortion-only model — selling stolen data rather than encrypting files — with a heavy focus on US healthcare and medical research organizations.