HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
ABERCROMBIE & KENT USA, LLC
bd_d9b6ec912fcd6c04 · schema v1 · pii pii-v1
Full breach record for ABERCROMBIE & KENT USA, LLC →On November 30, 2023, Abercrombie & Kent detected unauthorized access to its network environment. After an extensive forensic investigation and manual document review, the company determined on November 26, 2024 that a limited amount of personal information may have been accessed and/or acquired by an unauthorized individual. A total of 3,676 individuals were affected, including 5 Maine residents. Affected individuals were offered 12 months of Experian IdentityWorks identity theft protection.
Maine clockDiscovered Dec 12, 2023 → Filed with AG Dec 9, 2024363d ✗ ME AG >90d52 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1512f5f1-8462-4b8a-8d0b-67c2e716ae1b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 9, 2024
- Raw hash
- 7dbc3b2a94eb696d2e233975cc45d81f25723ea9a686f85c7207fe02d15ae595
Reporting entity
- Name
- ABERCROMBIE & KENT USA, LLCnorm: abercrombie kent usa
- Industry
- Other Commercial
Victim entity
- Name
- ABERCROMBIE & KENT USA, LLCnorm: abercrombie kent usa
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Dec 12, 2023
- Materiality determined
- Nov 26, 2024
- Notification sent
- Dec 9, 2024
- Affected individuals
- 5
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified appropriate global data protection authoritiesNotified law enforcement
Compliance
- Time to disclose
- 52 weeks(363 days from discovery to filing)
- Compliance flags
- ME AG >90d · 363dME resident >180d · 363d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 12, 2023→ Filed with AG: Dec 9, 2024363d 90 days ME AG >90d Maine Discovered: Dec 12, 2023→ Notified: Dec 9, 2024363d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.