MisusePrivilege AbuseCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Zulily, Inc.
bd_3c2a0b3c2997f9b5 · schema v1 · pii pii-v1
Full breach record for Zulily, Inc. →Zulily, LLC reported a data breach impacting 24,492 individuals due to insider wrongdoing. The breach occurred between February 23, 2022, and June 15, 2022, and was discovered on June 26, 2022. The compromised information included names and financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Affected individuals were notified in writing on July 22, 2022.
Maine clockDiscovered Jun 26, 2022 → Filed with AG Jul 22, 202226d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_430b9bf43cf0ad63Montana State AGfiled 2022-07-22Verified by operator
- bd_d4316952ca18512eOregon State AGfiled 2022-07-22Verified
- bd_ec59f3b17c8c3fe9California State AGfiled 2022-07-22Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d7842f53-5e1a-4b92-8c44-62aec40b5ea5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 22, 2022
- Raw hash
- 96f3d8df5aee3a2207cc0b271ae61111454df91b2156cc4095f8611ebd3d74d2
Reporting entity
- Name
- Zulily, Inc.norm: zulily
Victim entity
- Name
- Zulily, Inc.norm: zulily
Incident
- Discovered
- Jun 26, 2022
- Materiality determined
- —
- Notification sent
- Jul 22, 2022
- Affected individuals
- 24,492
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Insider
- Threat actor
- Internal
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 26, 2022→ Filed with AG: Jul 22, 202226d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.