HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Francesca's Acquisition, LLC
bd_723d481b8bee5beb · schema v1 · pii pii-v1
Full breach record for Francesca's Acquisition, LLC →Francesca's Acquisition, LLC notified consumers of a data breach discovered on January 31, 2023. The incident involved unauthorized access to personal information including names and government identifiers. The company engaged forensic investigators, implemented technical safeguards, and offered 12 months of identity monitoring. No evidence of fraudulent misuse was found.
Vermont clock✗ VT AG >45 bday34 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_200c243333239c20Maine State AGfiled 2023-09-25Candidate
- bd_22858389bdbdb2bdNew Hampshire State AGfiled 2023-09-25Verified
- bd_7d7745dc9785e048Montana State AGfiled 2023-09-25Verified by operator
- bd_a53d9dc745012e3aOregon State AGfiled 2023-09-25Verified
Show 2 more filings ↓Show fewer ↑
- bd_e88f10465d70bfb8California State AGfiled 2023-09-25Verified
- bd_f0c86345edca80fcWashington State AGfiled 2023-09-25Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-25-francescas-acquisition-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2023
- Raw hash
- ae7435403a278dfe6e4259e40ced534f323421546d85961468e6c82df41fffd2
Reporting entity
- Name
- Francesca's Acquisition, LLCnorm: francesca s acquisition
Victim entity
- Name
- Francesca's Acquisition, LLCnorm: francesca s acquisition
Incident
- Discovered
- Jan 31, 2023
- Materiality determined
- —
- Notification sent
- Sep 25, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 34 weeks(237 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.