HackingStolen CredentialsPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
Ouidad
bd_fb16eb842c52ce4a · schema v1 · pii pii-v1
Full breach record for Ouidad →Ouidad notified California AG of a data breach occurring June 30-July 4, 2013. Attackers accessed customer database, compromising names, credit card numbers, security codes, expiration dates, billing addresses, emails, usernames, passwords, and phone numbers. Ouidad engaged security experts, reset passwords, and provided one year of Equifax Credit Watch Gold identity theft protection.
California clockDiscovered Oct 1, 2013 → Notified Oct 1, 20130d ✓ CA 60-day OK17 days discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-43013
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2013
- Raw hash
- b35254c8abda9f6b5c62c957515f5b986db154e9539887f6069e7a2a738a6b5b
Reporting entity
- Name
- Ouidadnorm: ouidad
- Domain
- ouidad.com
Victim entity
- Name
- Ouidadnorm: ouidad
- Domain
- ouidad.com
Incident
- Discovered
- Oct 1, 2013
- Materiality determined
- —
- Notification sent
- Oct 1, 2013
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with California Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 1, 2013→ Notified: Oct 1, 20130d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.