Tendam
bd_ba5c890e6ff896a2 · schema v1 · pii pii-v1
Full breach record for Tendam →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage and machine-translated to English — verify against the source.
Summary
machine-translatedConsumer group in Spain issues warning after data theft cyber attack on one of Europe's leading fashion retailers | Sur in English. Tendam: The Spanish textile group Tendam, owner of the brands Cortefiel, Women'secret and Springfield, informed its customers of a cyberattack that occurred on September 5, which allowed cybercriminals to access personal data such as names, addresses and phone numbers. The Consumers and Users Organization (OCU) condemned Tendam's delay in informing its customers and advised them to take precautions to avoid scams. The OCU also called for sanctions against companies that do not comply with notification deadlines in the event of a data security breach. Linked ransomware group: ValenciaLeaks.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Sep 5, 2024
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitevalencialeaksbd_ccd15df84aa160742024-09-18 · +13dCandidate
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.