Bailey's I, LLC
bd_cf822e7030aa45f2 · schema v1 · pii pii-v1
Full breach record for Bailey's I, LLC →Bailey's Inc, an online retailer, disclosed a data breach affecting customers who placed orders or opened accounts between December 1, 2011, and January 26, 2016. Unauthorized actors accessed the website remotely, bypassing firewalls, and stole credit card data (numbers, CVV, expiration dates), cardholder names, addresses, phone numbers, email addresses, and login credentials. The breach was discovered in January 2016, though forensic analysis traced the initial intrusion back to December 2011. Bailey's reported the incident to law enforcement, notified financial partners (Wells Fargo, card networks), engaged security consultants, replaced servers, and enhanced firewalls and passwords.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_90242f5887072802South Carolina State AGfiled 2016-03-14Verified
- bd_9f3d217e0842e583Washington State AGfiled 2016-03-14Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-60483
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 14, 2016
- Raw hash
- f2ecb1177413ffb371a5044c9e9b747a1f8871ab823da7f80cdfb0f33a024a1c
Reporting entity
- Name
- Bailey's I, LLCnorm: bailey s i
- Domain
- baileyscss.com
Victim entity
- Name
- Bailey's I, LLCnorm: bailey s i
- Domain
- baileyscss.com
Incident
- Discovered
- Jan 1, 2016
- Materiality determined
- —
- Notification sent
- Mar 7, 2016
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTCREDENTIALSPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- complying with all of those legal requirements
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- CA 60-day late · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 1, 2016→ Notified: Mar 7, 201666d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.