HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
DAVID'S BRIDAL, LLC
bd_e28bf5dc4d11b65b · schema v1 · pii pii-v1
Full breach record for DAVID'S BRIDAL, LLC →David's Bridal reported a cyber incident where unauthorized access occurred on or around January 20, 2024. The company identified unusual activity in late January 2024 and determined that certain information, including names and potentially other data, was copied without authorization. The company notified federal law enforcement, secured its systems, and is offering credit monitoring and identity theft restoration services to affected individuals.
California clockDiscovered Jan 20, 2024 → Notified Sep 13, 2024237d ✗ CA 60-day late42 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6e11f3471bb4b253Leak Sitelockbit_3filed 2024-01-22(293d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_9d0c4e09f6601a1aCalifornia State AGfiled 2024-09-16(56d gap)Verified
- bd_9e6d2f15482a5cdaMontana State AGfiled 2024-09-13(59d gap)Candidate
- bd_f84193edf2f61f66Vermont State AGfiled 2024-09-13(59d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-594717
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 11, 2024
- Raw hash
- a7b3024888bd03ce0ef07bad2592fa13e6cf37b1e4117ee69edb01767d468a56
Reporting entity
- Name
- DAVID'S BRIDAL, LLCnorm: david s bridal
- Domain
- davidsbridal.com
Victim entity
- Name
- DAVID'S BRIDAL, LLCnorm: david s bridal
- Domain
- davidsbridal.com
Incident
- Discovered
- Jan 20, 2024
- Materiality determined
- —
- Notification sent
- Sep 13, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 42 weeks(296 days from discovery to filing)
- Compliance flags
- CA 60-day late · 237dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 20, 2024→ Notified: Sep 13, 2024237d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.