CafePress
bd_e5a3738643f85841 · schema v1 · pii pii-v1
Full breach record for CafePress →CafePress Inc. notified California residents that an unidentified third party obtained customer information from a database on or about February 19, 2019. Affected data included names, email addresses, passwords, physical addresses, phone numbers, Social Security Numbers, Tax Identification Numbers, and in some cases, the last four digits of credit card numbers and expiration dates. CafePress engaged outside experts, cooperated with federal law enforcement, and moved the affected database. The company offered two years of Experian IdentityWorks credit monitoring and identity theft resolution services.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_d2907b22ddc03bb6Oregon State AGfiled 2019-09-05Verified
- bd_4ba35611bfd1f1d3Montana State AGfiled 2019-09-04(1d gap)Candidate
- bd_78faab83148350f7Washington State AGfiled 2019-09-04(1d gap)Verified
- bd_cc142fb5b6225699South Carolina State AGfiled 2019-09-17(12d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-150319
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 5, 2019
- Raw hash
- 6d8366126aac5d2083ea36de2fde74222fbc8a3b104f5f9b26d4ca34085abf7a
Reporting entity
- Name
- CafePressnorm: cafepress
- Domain
- cafepress.com
Victim entity
- Name
- CafePressnorm: cafepress
- Domain
- cafepress.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Sep 3, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTCREDENTIALSFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Cooperating with federal law enforcement authorities
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.