HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumResolved
Self Esteem Brands, LLC
bd_7e6c29488896605f · schema v1 · pii pii-v1
Full breach record for Self Esteem Brands, LLC →Self Esteem Brands, LLC experienced unauthorized access to its network. An external actor accessed employee email accounts starting prior to December 19, 2023, and viewed/obtained files from servers between June 5-6, 2024. Affected data includes names, Social Security numbers, driver's license numbers, and potentially financial account and passport information. The company engaged a cybersecurity firm, notified law enforcement, and is offering credit monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_80ed207d3d6f0c9aNew Hampshire State AGfiled 2024-12-20Verified
- bd_f133c7f5a01fadaeVermont State AGfiled 2024-12-20Candidate
- bd_449efc28b3d2e54eVermont State AGfiled 2025-02-05(47d gap)Verified
- bd_f56833f3df66d569California State AGfiled 2025-02-05(47d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-596545
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 20, 2024
- Raw hash
- 2e20700827be7c44ec5140d63c4a0ad3b02b8da2d737da38340180e8926a6096
Reporting entity
- Name
- Self Esteem Brands, LLCnorm: self esteem brands
Victim entity
- Name
- Self Esteem Brands, LLCnorm: self esteem brands
Incident
- Discovered
- Jun 5, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.