HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

Les Entreprises La Canadienne Inc.

bd_8f81c0c514e04477 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 20, 2023

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Les Entreprises La Canadienne Inc. →2 incidents on file

La Canadienne Enterprises Inc. notified customers of a cybersecurity incident where an unauthorized third party gained real-time access to online transactions between Nov 19, 2022 and Jan 30, 2023. Compromised data included names, credit card details (number, expiry, CVV), email, and billing/shipping addresses. The company engaged IT specialists for investigation and containment, enhanced security measures, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 19, 2022

Begins

Mar 20, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_e58c1d86e9c20b022023-03-20Verified

Name: Les Entreprises La Canadienne Inc.
norm: les entreprises la canadienne
Domain: lacanadienneshoes.com

Name: Les Entreprises La Canadienne Inc.
norm: les entreprises la canadienne
Domain: lacanadienneshoes.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 19, 2022 – Jan 30, 2023
Materiality determined: —
Notification sent: Mar 17, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Retained the services of Information Technology specialists to contain and investigate the incident
Implemented numerous measures designed to enhance the security of our network, systems, and data
Offering a credit monitoring service with Cyberscout
Changes made: Implemented numerous measures designed to enhance the security of our network, systems, and data
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGMar 20 · first

Montana State AGMar 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-143.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2023
Raw hash: 1a6cc785b81ecafc3e91a5065de8fbc527e15461321edfa98f91e4359f1cd6c0

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLes Entreprises La Canadienne Inc.

Victim entityLes Entreprises La Canadienne Inc.

IncidentUnauthorized Access

Stated responseRetained the services of Information Technology specialists to contain and investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov