DisclosureLens
HackingRetail & ConsumerRetailSkimmerStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsCredentialsLowContained

CLAIRE'S STORES, INC.

bd_95d7b1867aaa13d4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 12, 2020

Filed

Jul 8, 2020

To disclose

26 days

Affected

Not disclosed

Linked

8 filings

Confidence

63%
Full breach record for CLAIRE'S STORES, INC.2 incidents on file

Claire's Stores, Inc. identified malicious code on its e-commerce websites that captured payment card and contact information during checkout. The code was present intermittently between April 7, 2020, and June 12, 2020, when it was discovered and removed. The incident affected online customers; retail store purchases were not involved. Affected data includes names, addresses, phone numbers, payment card numbers, expiration dates, and CVVs. The company engaged a security firm, reinforced site security, notified law enforcement and payment card networks, and offered one year of Experian IdentityWorks to affected individuals.

Incident timeline

undetected · 66 days
discovery → filing · 26 days

Apr 7, 2020

Begins

Jun 12, 2020

Discovered

Jul 8, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 189d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗

Pattern: first filing Jan 1 (IL), last Jul 8 (CA) — a 189-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.