Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
OBAGI COSMECEUTICALS LLC
bd_aade961adc809a37 · schema v1 · pii pii-v1
Full breach record for OBAGI COSMECEUTICALS LLC →Obagi Cosmeceuticals LLC notified Massachusetts residents of a cybersecurity incident involving unauthorized access to personal information. The breach exposed names, addresses, and Social Security numbers. Obagi is offering 24 months of complimentary credit monitoring and identity restoration services through Experian. The investigation is ongoing.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-765-obagi-cosmeceuticals-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 065bf010d41377f9078e129abb447e11a34d5cec10d3f0c74ffddfe8d190c6f3
Reporting entity
- Name
- OBAGI COSMECEUTICALS LLCnorm: obagi cosmeceuticals
Victim entity
- Name
- OBAGI COSMECEUTICALS LLCnorm: obagi cosmeceuticals
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- May 12, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.