HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
Princess Polly Group Pty. Ltd.
bd_c7693b5f3079e6a2 · schema v1 · pii pii-v1
Full breach record for Princess Polly Group Pty. Ltd. →Princess Polly Group Pty Ltd notified the California AG of unauthorized access to its Australian website between Nov 1, 2018, and Apr 29, 2019. An unidentified third party accessed personal information (name, address, email, phone, DOB, username, password) and payment details for some customers. The US website was not affected. The company engaged external IT and cyber security consultants to investigate and confirmed the site is secure. They upgraded their payment processor to Braintree. No Afterpay/PayPal payment info was affected.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_243e455eea2d8d5dWashington State AGfiled 2019-06-07Verified
- bd_b0a23f6591c1325fMontana State AGfiled 2019-06-06(1d gap)Verified by operator
- bd_1ff09f03b52d883eOregon State AGfiled 2019-05-30(8d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147960
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2019
- Raw hash
- 0938838496a7025b1edff431e490d1f493ae4d9f657756fe466d3964b580ccdc
Reporting entity
- Name
- Princess Polly Group Pty. Ltd.norm: princess polly
- Domain
- www.princesspolly.com
Victim entity
- Name
- Princess Polly Group Pty. Ltd.norm: princess polly
- Domain
- www.princesspolly.com
Incident
- Discovered
- Apr 29, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.