HackingStolen CredentialsCapture Stored DataCapture App DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICFINANCIAL_CREDENTIALSMediumContained
Self Esteem Brands, LLC
bd_bd2975cd1730d428 · schema v1 · pii pii-v1
Full breach record for Self Esteem Brands, LLC →Self Esteem Brands (Woodbury, MN) detected unauthorized access to servers (Jun 5-6, 2024) and employee email accounts (pre-Dec 19, 2023 through Jun 6, 2024). Discovered Nov 26, 2024. Data exposed for 33 ME residents: SSNs, driver's license, financial account, health, and government ID info. Law enforcement notified. Residents offered one-year Equifax credit monitoring.
Maine clockDiscovered Nov 26, 2024 → Filed with AG Dec 20, 202424d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed33 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/70d574b4-04de-4e4e-93ca-d2224513c1f1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 20, 2024
- Raw hash
- 016b396a74763cb01158b962ab5ce9cd93f27761bbceb4a74833ea9379bea8c7
Reporting entity
- Name
- Self Esteem Brands, LLCnorm: self esteem brands
- Industry
- Other Commercial
Victim entity
- Name
- Self Esteem Brands, LLCnorm: self esteem brands
- Industry
- Other Commercial
Incident
- Discovered
- Nov 26, 2024
- Materiality determined
- Nov 26, 2024
- Notification sent
- Dec 20, 2024
- Affected individuals
- 33
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 26, 2024→ Filed with AG: Dec 20, 202424d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.