MisuseData MishandlingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
NORDSTROM, INC.
bd_692931f2eb247e13 · schema v1 · pii pii-v1
Full breach record for NORDSTROM, INC. →Nordstrom, Inc. notified the California Attorney General of an incident on October 9, 2018, where a contract worker improperly handled employee data. The incident involved name, SSN, pay card, bank account, insurance, salary, DOB, address, and phone number. No customer data was impacted. Nordstrom notified law enforcement, removed the worker's access, and offered 24 months of credit monitoring.
California clockDiscovered Oct 9, 2018 → Notified Nov 5, 201827d ✓ CA 60-day OK27 days discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_91218bdcbbb8241aOregon State AGfiled 2018-11-05Candidate
- bd_c53d4842eee28073Washington State AGfiled 2018-11-05Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-141428
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 5, 2018
- Raw hash
- be28030f02c36061bacc77e3b784e07732b1a70cbe865d1148022b605822b560
Reporting entity
- Name
- NORDSTROM, INC.norm: nordstrom
Victim entity
- Name
- NORDSTROM, INC.norm: nordstrom
Incident
- Discovered
- Oct 9, 2018
- Materiality determined
- —
- Notification sent
- Nov 5, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Insider
- Threat actor
- Partner
- Third party
- via Contract worker
- Initial access
- insider_action
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 27d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 9, 2018→ Notified: Nov 5, 201827d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.