HackingRetail & ConsumerRetailCustomer Data InvolvedEmployee Data InvolvedPIIEmploymentMediumContained

CITI TRENDS, INC.

bd_7ce8163a4aec4fa2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 14, 2023

Filed

Jul 27, 2023

To disclose

28 weeks

Affected

14,381state residents only

Confidence

64%

Full breach record for CITI TRENDS, INC. →5 incidents on file

Citi Trends, Inc. notified South Carolina residents of a security incident occurring on January 14, 2023, where a third party accessed and disrupted its IT network. The incident potentially exposed employee and prospective employee PII, including names and employment data. Citi Trends engaged outside experts, reset credentials, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due28 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 28 weeks / 194 days

Jan 14, 2023

Begins

Jan 14, 2023

Discovered

Jul 27, 2023

Filed

vs. sector median

+20 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed14,381 affectedView incident

Name: CITI TRENDS, INC.
norm: citi trends
Domain: cititrends.com

Name: CITI TRENDS, INC.
norm: citi trends
Domain: cititrends.com
Industry: Retail & Consumerllm

Discovered: Jan 14, 2023
Breach occurred: Jan 14, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 21, 2023
Affected individuals: 14,381state-resident count only
Data types: PIIEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Initial access: exploit_public_facing

During the incident: Changed passwords and blocking the unauthorized access
Outside technical experts were also engaged to enhance the security of our systems
Offering you ## months of free credit monitoring and $1 million in identity theft insurance through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(194 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/CitiTrendsInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2023
Raw hash: 89a8329b4b4f2627dcafd481aa3c2a12cdeb5b117a2ef3d84d94dada754a4113

Reporting entityCITI TRENDS, INC.

Victim entityCITI TRENDS, INC.

Incidentdiscovered Jan 14, 2023

Stated responseChanged passwords and blocking the unauthorized access

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov