HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Teleflora
bd_8eba6c47eb70be88 · schema v1 · pii pii-v1
Full breach record for Teleflora →Teleflora LLC reported a data breach involving a third-party software provider. Unusual activity was identified on November 9, 2023, and an investigation determined unauthorized access occurred on November 10, 2023. A manual review completed on February 23, 2024, confirmed that files containing names and Social Security Numbers were accessed. Teleflora is offering one year of identity protection services to affected individuals.
California clockDiscovered Nov 9, 2023 → Notified Feb 23, 2024106d ✗ CA 60-day late18 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c6736a518487ed4dLeak Siteakirafiled 2023-11-29(105d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-582403
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2024
- Raw hash
- 5104e4e24db977508c7b4bccbea08a85bd5a906a2db7b41716f6ed9482948e1a
Reporting entity
- Name
- Telefloranorm: teleflora
- Domain
- teleflora.com
Victim entity
- Name
- Telefloranorm: teleflora
- Domain
- teleflora.com
Incident
- Discovered
- Nov 9, 2023
- Materiality determined
- —
- Notification sent
- Feb 23, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via third-party software provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- CA 60-day late · 106dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 9, 2023→ Notified: Feb 23, 2024106d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.