L'OCCITANE, INC.
bd_fbc54d4a76441ae2 · schema v1 · pii pii-v1
All records for L'OCCITANE, INC. →Account takeover notice
L'OCCITANE, INC. notified customers of unauthorized access to their accounts. The filing says: “On May 25, 2018, L'Occitane discovered that unknown persons were attempting to gain unauthorized access to L'Occitane customer accounts on its U.S. website. L' Occitane immediately began an investigation and learned that these unknown persons appeared to be using account credentials , such as user logins and passwords , that were obtained from an unknown source in the hope that they might match the account credentials of L'Occitane's U.S. customers.”
L'Occitane, Inc. notified the NH AG of a credential stuffing attack on its US e-commerce site. Discovered May 25, 2018, affecting approx. 1 NH resident. Attackers used stolen credentials to access accounts, potentially altering PII (name, address, DOB) and making fraudulent purchases using stored payment info. Actual card numbers were not exposed. L'Occitane disabled stored cards, reset passwords, and notified customers.
J jump to incidentP pin to compareR raw source
Incident timeline
May 1, 2018
Begins
May 25, 2018
Discovered
Jun 21, 2018
Filed
vs. sector median
6 wks faster
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Massachusetts State AGbd_e258be84534692662018-06-21Verified
Filing propagation · 2 filings · 2 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.