DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedPIIFinancial accountCredentialsLowContained

Francesca’s Services Corporation

bd_b1818da04ffd5d65 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 19, 2018

To disclose

—

Affected

120state residents only

Linked

5 filings

Confidence

66%
Full breach record for Francesca’s Services Corporation →2 incidents on file

Francesca's Services Corporation notified customers that a former third-party vendor, Annex Cloud, had unauthorized code on its social login service between Dec 2017 and July 2018. The code potentially captured checkout data including names, addresses, passwords, and payment card details. The feature was removed and customers advised to reset passwords and monitor statements.

Incident timeline

Dec 28, 2017

Begins

Nov 19, 2018

Filed

This filing is one of 5 about the same incident.View merged incident
Part of Social Annex, Inc. supply-chain incident (2018) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Oregon State AGNov 19 · first
Massachusetts State AGNov 19 · first
Washington State AGNov 19 · first
Montana State AGNov 19 · first · this page
New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.