DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

International Coffee & Tea

bd_bd7616f55fb17fbf · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 6, 2024

Filed

Dec 20, 2024

To disclose

28 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%
Full breach record for International Coffee & Tea →

International Coffee & Tea, LLC (The Coffee Bean & Tea Leaf) notified consumers of a data breach where unauthorized actors accessed systems and email accounts between April and August 2024. Potentially affected data includes names. The company engaged third-party cybersecurity specialists and offers 12 months of credit monitoring.

Vermont clock✗ VT AG >45 bday28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 62 days
discovery → filing · 28 weeks / 197 days

Apr 5, 2024

Begins

Jun 6, 2024

Discovered

Dec 20, 2024

Filed

vs. sector median

+21 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGDec 19 · first
Oregon State AGDec 19 · first
Massachusetts State AG+1d
Vermont State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.