HackingRetail & ConsumerRetailStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Louis Vuitton North America, Inc.

bd_a11e65d96edbbc71 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 2, 2025

Filed

Aug 22, 2025

To disclose

7 weeks

Affected

17,615state residents only

Linked

11 filings

Confidence

71%

Full breach record for Louis Vuitton North America, Inc. →

Louis Vuitton North America, Inc. reported a cybersecurity incident to the Washington AG. Unauthorized access occurred June 7-13, 2025; discovered July 2, 2025. Impacted data included names, contact info, DOB, and passports/gov IDs. 17,615 Washington residents affected. Incident contained; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 25 days

discovery → filing · 7 weeks / 51 days

Jun 7, 2025

Begins

Jul 2, 2025

Discovered

Aug 22, 2025

Filed

vs. sector median

on median

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Vermont State AGbd_00c7f49e1c6e2e332025-08-22Verified
Oregon State AGbd_0d20b76b9207077d2025-08-22Candidate
Indiana State AGbd_1ee390205745490f2025-08-22Verified
Delaware State AGbd_231e04f62b4a11f92025-08-22Verified

Show 6 more filings ↓up to 4d gap

Nebraska State AGbd_3b1aa3fb3c4eadce2025-08-22Verified
South Carolina State AGbd_46eab46954d8ec7c2025-08-22Verified
New Hampshire State AGbd_75d6d04a1cce6d8c2025-08-22Verified
California State AGbd_9b320ebfe5783ef52025-08-22Verified
Massachusetts State AGbd_bc9d24a204d393922025-08-22Verified
Texas State AGbd_54b0db85071f98e72025-08-26 · +4dVerified

Name: Louis Vuitton North America, Inc.
norm: louis vuitton north america

Name: Louis Vuitton North America, Inc.
norm: louis vuitton north america
Industry: Retail & Consumerllm

Discovered: Jul 2, 2025
Breach occurred: Jun 7, 2025 – Jun 13, 2025
Undetected for: 25 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 22, 2025
Affected individuals: 17,615state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameDriver's licence numberDate of birthPassport number
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged leading third-party cybersecurity experts
Notified law enforcement
Offering complimentary 24-month membership of Experian IdentityWorks credit monitoring, fraud resolution services, and identity theft insurance
Changes made: Taking steps designed to enhance the security of its systems and to help prevent similar incidents in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Vermont State AGAug 22 · first

Oregon State AGAug 22 · first

Indiana State AGAug 22 · first

Delaware State AGAug 22 · first

Nebraska State AGAug 22 · first

South Carolina State AGAug 22 · first

New Hampshire State AGAug 22 · first

California State AGAug 22 · first

Massachusetts State AGAug 22 · first

Washington State AGAug 22 · first · this page

Texas State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34441.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2025
Raw hash: d352450e4b54d42f923c1576b06c75b2c29f9d7cc15aeb5a1c19f221038c8fd0

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityLouis Vuitton North America, Inc.

Victim entityLouis Vuitton North America, Inc.

Incidentdiscovered Jul 2, 2025

Stated responseEngaged leading third-party cybersecurity experts

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com