TIFFANY AND COMPANY
bd_a6db0f367e8e0b38 · schema v1 · pii pii-v1
Full breach record for TIFFANY AND COMPANY →3 incidents on fileTiffany and Company notified the NH Attorney General of a cybersecurity incident where an unauthorized third party gained access to company systems on May 12, 2025. The breach affected approximately 4 New Hampshire residents. Compromised data included names, addresses, phone numbers, emails, sales data, and gift card numbers/PINs. Tiffany disabled accounts, reset passwords, took systems offline, and engaged external cybersecurity experts. No evidence of further misuse was found.
J jump to incidentP pin to compareR raw source
Incident timeline
May 12, 2025
Begins
May 12, 2025
Discovered
Sep 19, 2025
Filed
vs. sector median
+9 wks slower
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_58634fcfca97ce8a2025-09-17 · +2dVerified
- Maine State AGbd_cb857f15207092f72025-09-17 · +2dVerified
- Montana State AGbd_09bad66e2b8c1ca42025-09-16 · +3dCandidate
- Indiana State AGbd_d1a29158faec76b32025-09-16 · +3dVerified
Show 2 more filings ↓Show fewer ↑up to 3d gap
- Vermont State AGbd_e19e0f25f58441822025-09-16 · +3dVerified
- Nebraska State AGbd_ef25a0a9294a271f2025-09-16 · +3dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.