HackingCustomer Data InvolvedIDENTITY_BASICLowContained
DAVID'S BRIDAL, LLC
bd_f84193edf2f61f66 · schema v1 · pii pii-v1
Full breach record for DAVID'S BRIDAL, LLC →David’s Bridal notified consumers in Vermont and Rhode Island of a cyber incident occurring on or around January 20, 2024. Unauthorized access resulted in the copying of personal information, including names. The company engaged federal law enforcement, enhanced security measures, and offered credit monitoring services. Exact affected counts were not disclosed in the filing.
Vermont clock✗ VT AG >45 bday34 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 234 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6e11f3471bb4b253Leak Sitelockbit_3filed 2024-01-22(234d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_9e6d2f15482a5cdaMontana State AGfiled 2024-09-13Candidate
- bd_9d0c4e09f6601a1aCalifornia State AGfiled 2024-09-16(3d gap)Verified
- bd_e28bf5dc4d11b65bCalifornia State AGfiled 2024-11-11(59d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-09-13-davids-bridal-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 13, 2024
- Raw hash
- 03134dac352de4f7ba41e7f877eb4609720eaf6d061b72dd516832d8b71fe23d
Reporting entity
- Name
- DAVID'S BRIDAL, LLCnorm: david s bridal
- Domain
- davidsbridal.com
Victim entity
- Name
- DAVID'S BRIDAL, LLCnorm: david s bridal
- Domain
- davidsbridal.com
Incident
- Discovered
- Jan 20, 2024
- Materiality determined
- —
- Notification sent
- Sep 13, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 34 weeks(237 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.