DisclosureLens
MisuseRetailFinancial accountPIILowContained

Chico's FAS, Inc

bd_f2668d6b66a15e29 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 8, 2023

Filed

Oct 2, 2023

To disclose

8 weeks

Affected

2state residents only

Linked

5 filings

Confidence

66%
Full breach record for Chico's FAS, Inc

Chico's FAS, Inc. notified the New Hampshire Attorney General of a security incident involving a third-party call center contractor. Between May 22 and August 10, 2023, the contractor captured payment card information from two New Hampshire residents. The contractor was terminated, and notification letters were mailed on October 2, 2023.

Incident timeline

undetected · 78 days
discovery → filing · 8 weeks / 55 days

May 22, 2023

Begins

Aug 8, 2023

Discovered

Oct 2, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGOct 2 · first
Indiana State AGOct 2 · first
Vermont State AGOct 2 · first
New Hampshire State AGOct 2 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.