HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsCredentialsLowContained

Ouidad

bd_fb16eb842c52ce4a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 18, 2013

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Ouidad →

Ouidad experienced an unauthorized access incident between June 30 and July 4, 2013, where attackers compromised the customer database. Affected data included names, credit card numbers, security codes, expiration dates, billing addresses, emails, phone numbers, and potentially usernames/passwords. Ouidad engaged security experts, reset passwords, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 30, 2013

Begins

Oct 18, 2013

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e229aa7c0c65a5b72013-10-21 · +3dVerified

Name: Ouidad
norm: ouidad
Domain: ouidad.com

Name: Ouidad
norm: ouidad
Domain: ouidad.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jun 30, 2013 – Jul 4, 2013
Materiality determined: —
Notification sent: Oct 1, 2013
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentialsCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Engaged leading security experts
Implemented changes designed to protect your information from any further unauthorized access
Reset your Ouidad password
Arranged for a credit monitoring company to provide you a free one year membership in the Equifax Credit Watch Gold with Web Detect identity theft protection monitoring program
Changes made: Implemented changes designed to protect your information from future attacks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGOct 18 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-43013
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 18, 2013
Raw hash: b35254c8abda9f6b5c62c957515f5b986db154e9539887f6069e7a2a738a6b5b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityOuidad

Victim entityOuidad

IncidentUnauthorized Access

Stated responseEngaged leading security experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov