HackingRetail & ConsumerRetailCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
DAVID'S BRIDAL, LLC
bd_e4166a65987c7c10 · schema v1 · pii pii-v1
Full breach record for DAVID'S BRIDAL, LLC →On or around January 20, 2024, David's Bridal experienced an external cyber incident in which unauthorized actors may have copied certain data from its network systems. The breach was discovered on August 15, 2024 following investigation. Information potentially affected includes names and Social Security numbers. 58 Maine residents were notified on September 13, 2024. Affected individuals were offered 12 months of Experian IdentityWorks credit monitoring at no cost.
Leak gap clock✗ Leak >180d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed58 affectedView incident
A leak claim by lockbit_3 about this victim predates this filing by 234 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f271d5a1-8e65-4a0a-bca3-566e4f1ba269.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 13, 2024
- Raw hash
- 020781ff9edd2f2da48b166b3d6eb1f657379ad895405d728eb7ec35ad40345d
Reporting entity
- Name
- DAVID'S BRIDAL, LLCnorm: david s bridal
- Domain
- davidsbridal.com
- Industry
- Retail – Bridal and Formalwear
Victim entity
- Name
- DAVID'S BRIDAL, LLCnorm: david s bridal
- Domain
- davidsbridal.com
- Industry
- Retail – Bridal and Formalwear
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Aug 15, 2024
- Materiality determined
- —
- Notification sent
- Sep 13, 2024
- Affected individuals
- 58
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notifiedFederal law enforcement notified
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 15, 2024→ Filed with AG: Sep 13, 202429d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.