AccidentalLossCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTHighContained
GODIVA CHOCOLATIER, INC.
bd_e52b10e64626a4f7 · schema v1 · pii pii-v1
Full breach record for GODIVA CHOCOLATIER, INC. →Godiva Chocolatier, Inc. reported the loss of a flash drive containing sensitive HR data for approximately 2,638 California residents (current/former employees and applicants). A former employee compiled the data, which included SSNs, DOBs, and contact info, onto the drive. The drive was found by a private individual and returned. Godiva engaged forensic investigators, notified affected individuals, provided credit monitoring, and updated security policies regarding portable media.
California clockDiscovered Apr 15, 2013 → Notified May 29, 201344d ✓ CA 60-day OK6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,638 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-41881
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2013
- Raw hash
- f99335ac42706f87ec3ebffc261edade97d30ac7da19c56ab4bcbc9187562769
Reporting entity
- Name
- GODIVA CHOCOLATIER, INC.norm: godiva chocolatier
Victim entity
- Name
- GODIVA CHOCOLATIER, INC.norm: godiva chocolatier
Incident
- Discovered
- Apr 15, 2013
- Materiality determined
- —
- Notification sent
- May 29, 2013
- Affected individuals
- 2,638
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- Internal
- Regulator citations
- Submitted breach notification to the Office of the California Attorney General
- Initial access
- removable_media
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 44d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 15, 2013→ Notified: May 29, 201344d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.