Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained

Sol de Janeiro USA, Inc.

bd_699de189ab1ab099 · schema v1 · pii pii-v1

Full breach record for Sol de Janeiro USA, Inc. →

Sol de Janeiro USA, Inc. notified consumers of unauthorized access to employee email accounts discovered on October 17, 2023. The incident potentially exposed names and other personal information. The company engaged forensic investigators, secured email systems, and offered 12 months of credit monitoring.

Vermont clock✗ VT AG >45 bday16 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Source provenance

Source URL: https://ago.vermont.gov/document/2024-02-07-sol-de-janeiro-usa-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2024
Raw hash: 51a67fc1b22058381eee898020eb8f3e545e40767e11468bd103c952b0382f21

Reporting entity

Name: Sol de Janeiro USA, Inc.
norm: sol de janeiro usa

Victim entity

Name: Sol de Janeiro USA, Inc.
norm: sol de janeiro usa

Incident

Discovered: Oct 17, 2023
Materiality determined: —
Notification sent: Feb 6, 2024
Affected individuals: Not disclosed
Data types: IDENTITY_BASIC
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

Compliance

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.