MisuseFINANCIAL_ACCOUNTPIILowContained
Chico's FAS, Inc
bd_f2668d6b66a15e29 · schema v1 · pii pii-v1
Full breach record for Chico's FAS, Inc →Chico's FAS, Inc. notified the New Hampshire Attorney General of a security incident involving a third-party call center contractor. Between May 22 and August 10, 2023, the contractor captured payment card information from two New Hampshire residents. The contractor was terminated, and notification letters were mailed on October 2, 2023.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_209c7e8c5a06aa64Montana State AGfiled 2023-10-02Candidate
- bd_d09028d39b4828c2Vermont State AGfiled 2023-10-02Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/chicos-fas-20231002.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 2, 2023
- Raw hash
- 518b767f8d76278014b75dec47d704366f00bc927e6eeb896dc14b774653dac1
Reporting entity
- Name
- Chico's FAS, Incnorm: chico s fas
Victim entity
- Name
- Chico's FAS, Incnorm: chico s fas
Incident
- Discovered
- Aug 8, 2023
- Materiality determined
- —
- Notification sent
- Oct 2, 2023
- Affected individuals
- 2
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Insider
- MITRE ATT&CK
- T1056 Input Capture
- Threat actor
- InternalFinancial
- Initial access
- insider_action
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.