DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedGovernment IDHighResolved

Eileen Fisher, Inc.

bd_9923c6cfea26ba06 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 5, 2023

Filed

Mar 1, 2023

To disclose

8 weeks

Affected · nationwide

1,8543 in this filing

Confidence

50%
Full breach record for Eileen Fisher, Inc. →4 incidents on file

Eileen Fisher, Inc. disclosed a data breach affecting 3 Maine residents, which occurred between July 2, 2021, and October 19, 2021. The breach was discovered on January 5, 2023, and was described as an external system breach or hacking incident. The compromised information includes names combined with Social Security numbers. Affected individuals were notified on March 1, 2023, and offered 24 months of credit monitoring and identity theft protection services through Kroll.

Maine clockDiscovered Jan 5, 2023 → Filed with AG Mar 1, 202355d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 552 days
discovery → filing · 8 weeks / 55 days

Jul 2, 2021

Begins

Jan 5, 2023

Discovered

Mar 1, 2023

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,854 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.