HackingIdentity (basic)Financial accountLowContained

Les Entreprises La Canadienne Inc.

bd_e58c1d86e9c20b02 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 20, 2023

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

69%

Full breach record for Les Entreprises La Canadienne Inc. →2 incidents on file

La Canadienne (Les Entreprises La Canadienne Inc.) disclosed a cybersecurity incident affecting online transactions on its website between November 19, 2022, and January 30, 2023. An unauthorized third party gained real-time access to transaction data, including names, credit card numbers, CVVs, and billing/shipping addresses. The company retained IT specialists, enhanced network security, and provided 12 months of complimentary credit monitoring via Cyberscout/TransUnion. No confirmation of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 19, 2022

Begins

Mar 20, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_8f81c0c514e044772023-03-20Candidate

Name: Les Entreprises La Canadienne Inc.
norm: les entreprises la canadienne
Domain: lacanadienneshoes.com

Name: Les Entreprises La Canadienne Inc.
norm: les entreprises la canadienne
Domain: lacanadienneshoes.com
Industry: retail_consumer

Discovered: —
Breach occurred: Nov 19, 2022 – Jan 30, 2023
Materiality determined: —
Notification sent: Mar 17, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Retained the services of Information Technology specialists to contain and investigate the incident
Implemented numerous measures designed to enhance the security of our network, systems, and data
Offering a complimentary a twelve (12) month subscription to online monitoring service with Cyberscout
Changes made: Implemented numerous measures designed to enhance the security of our network, systems, and data
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGMar 20 · first

Vermont State AGMar 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-03-20-la-canadienne-enterprises-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2023
Raw hash: 76f91843b61aed4fe18df7cfa0572696102025144c0dc3a3c41f2df1fd216ce1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLes Entreprises La Canadienne Inc.

Victim entityLes Entreprises La Canadienne Inc.

IncidentUnauthorized Access

Stated responseRetained the services of Information Technology specialists to contain and investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov