HackingEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTFINANCIAL_ACCOUNTMediumContained
Norwex
bd_f0c63b26630217ae · schema v1 · pii pii-v1
Full breach record for Norwex →Norwex USA, Inc. notified the California Attorney General of a security breach discovered on December 15, 2024, involving unauthorized access to systems around December 11, 2024. The incident potentially exposed employee personal data including Social Security numbers, driver's licenses, payroll information, and tax forms. The company contained the incident, engaged outside experts, and offered two years of identity monitoring.
California clockDiscovered Dec 15, 2024 → Notified Dec 23, 20248d ✓ CA 60-day OK8 days discovery → filing
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_5c51d17b454271e6Montana State AGfiled 2024-12-23Candidate
- bd_6198b292f3b745acDelaware State AGfiled 2024-12-23Verified
- bd_93976078e01ae927Oregon State AGfiled 2024-12-23Verified
- bd_a1472ffc68e8a6ddVermont State AGfiled 2024-12-23Verified
Show 1 more filing ↓Show fewer ↑
- bd_a53ee30642d96d86Indiana State AGfiled 2024-12-23Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-596604
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2024
- Raw hash
- 554c3d5ceb21a12a6c58a451a4971ec692f5ca81c79e2a5486407d50bafd9b55
Reporting entity
- Name
- Norwexnorm: norwex
- Domain
- norwex.com
Victim entity
- Name
- Norwexnorm: norwex
- Domain
- norwex.com
Incident
- Discovered
- Dec 15, 2024
- Materiality determined
- —
- Notification sent
- Dec 23, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- Threat actor
- External
- Regulator citations
- Reported the issue to law enforcement
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 8d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 15, 2024→ Notified: Dec 23, 20248d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.