HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Truly Nolen of America, Inc.
bd_4fa3dab6d69942f8 · schema v1 · pii pii-v1
Full breach record for Truly Nolen of America, Inc. →Truly Nolen of America, Inc. reported a data breach affecting California residents. Unauthorized access occurred between April 29, 2022, and May 11, 2022, resulting in the exfiltration of personal information, including names. The company engaged forensic specialists, secured the network, notified federal law enforcement, and offered 12 months of credit monitoring via Experian.
California clockDiscovered May 11, 2022 → Notified Aug 26, 2022107d ✗ CA 60-day late15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fa57f50f7efd2f16Maine State AGfiled 2022-08-26Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-556670
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 26, 2022
- Raw hash
- 629d10e3b6bc46791b3790d0cad395d676610ac91524d7a7683b76e171319506
Reporting entity
- Name
- Truly Nolen of America, Inc.norm: truly nolen of america
Victim entity
- Name
- Truly Nolen of America, Inc.norm: truly nolen of america
Incident
- Discovered
- May 11, 2022
- Materiality determined
- —
- Notification sent
- Aug 26, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported this incident to federal law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- CA 60-day late · 107d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 11, 2022→ Notified: Aug 26, 2022107d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.