Social EngineeringPhishingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumActive
International Cosmetics and Perfumes
bd_cc146e3fd8be8c93 · schema v1 · pii pii-v1
Full breach record for International Cosmetics and Perfumes →International Cosmetics & Perfumes notified California regulators of a data security incident occurring between April 29 and May 18, 2020. Phishing attacks compromised employee email accounts, potentially exposing customer personal information including names, addresses, SSNs, and financial data. The company engaged law enforcement and forensic experts, terminated access, and offered credit monitoring services.
California clockDiscovered May 18, 2020 → Notified Nov 12, 2020178d ✗ CA 60-day late26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-196261
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2020
- Raw hash
- 553fac13de65c525d55c62c9c0bc8c63b1e6a93d2045fdee4b29d59bf4bc32f7
Reporting entity
- Name
- International Cosmetics and Perfumesnorm: international cosmetics and perfumes
- Domain
- icperfumes.com
Victim entity
- Name
- International Cosmetics and Perfumesnorm: international cosmetics and perfumes
- Domain
- icperfumes.com
Incident
- Discovered
- May 18, 2020
- Materiality determined
- —
- Notification sent
- Nov 12, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- CA 60-day late · 178d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 18, 2020→ Notified: Nov 12, 2020178d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.