HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowActive
Rebecca Minkoff
bd_5975db7acd104c00 · schema v1 · pii pii-v1
Full breach record for Rebecca Minkoff →Rebecca Minkoff LLC submitted a supplemental notification to the New Hampshire Attorney General on November 4, 2016, regarding a security incident affecting its website. The company discovered on October 7, 2016, that an additional 60 New Hampshire residents were affected. Compromised data included names, usernames, passwords, and payment card details (account number, expiration, CVV). Initial notification was sent September 9, 2016. The investigation is ongoing with a forensic expert.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_765bb9b93352c75eWashington State AGfiled 2016-11-04Verified by operator
- bd_2435da16c8f53f0cOregon State AGfiled 2016-09-29(36d gap)Verified
- bd_a1d45ea1e10c25b3California State AGfiled 2016-09-09(56d gap)Verified
- bd_e4dda695c3594dc8Montana State AGfiled 2016-09-09(56d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/rebecca-minkoff-20161104.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 4, 2016
- Raw hash
- e869c84b08c29b216b2e9dcfea6016c29f6b7be9f481039c1340d2ed50d106d7
Reporting entity
- Name
- Rebecca Minkoffnorm: rebecca minkoff
Victim entity
- Name
- Rebecca Minkoffnorm: rebecca minkoff
Incident
- Discovered
- Oct 7, 2016
- Materiality determined
- —
- Notification sent
- Nov 7, 2016
- Affected individuals
- 60
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified you of a security incident
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.