HackingRetail & ConsumerRetailCustomer Data InvolvedEmployee Data InvolvedPIIEmploymentMediumContained

CITI TRENDS, INC.

bd_7ce8163a4aec4fa2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 14, 2023

Filed

Jul 27, 2023

To disclose

28 weeks

Affected

14,381state residents only

Linked

4 filings

Confidence

64%

Full breach record for CITI TRENDS, INC. →3 incidents on file

Citi Trends, Inc. notified South Carolina residents of a security incident occurring on January 14, 2023, where a third party accessed and disrupted its IT network. The incident potentially exposed employee and prospective employee PII, including names and employment data. Citi Trends engaged outside experts, reset credentials, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due28 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 28 weeks / 194 days

Jan 14, 2023

Begins

Jan 14, 2023

Discovered

Jul 27, 2023

Filed

vs. sector median

+18 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_f117ecebcd4dd6f92023-06-28 · +29dVerified
Montana State AGbd_60c21c5c5225ddd62023-06-23 · +34dVerified by operator
Maine State AGbd_fa877ef62e48ea9d2023-06-23 · +34dCandidate

Name: CITI TRENDS, INC.
norm: citi trends
Domain: cititrends.com

Name: CITI TRENDS, INC.
norm: citi trends
Domain: cititrends.com
Industry: Retail & Consumerllm

Discovered: Jan 14, 2023
Breach occurred: Jan 14, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 21, 2023
Affected individuals: 14,381state-resident count only
Data types: PIIEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Initial access: exploit_public_facing

During the incident: Changed passwords and blocking the unauthorized access
Outside technical experts were also engaged to enhance the security of our systems
Offering you ## months of free credit monitoring and $1 million in identity theft insurance through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(194 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJun 23 · first

Maine State AGJun 23 · first

Massachusetts State AG+5d

South Carolina State AG+34d · this page

Pattern: first filing Jun 23 (MT), last Jul 27 (SC) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/CitiTrendsInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2023
Raw hash: 89a8329b4b4f2627dcafd481aa3c2a12cdeb5b117a2ef3d84d94dada754a4113

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCITI TRENDS, INC.

Victim entityCITI TRENDS, INC.

Incidentdiscovered Jan 14, 2023

Stated responseChanged passwords and blocking the unauthorized access

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov