CITI TRENDS, INC.

Country : United States of America - Exfiltraded data : yes - Encrypted data : no

Citi Trends, Inc. notified South Carolina residents of a security incident occurring on January 14, 2023, where a third party accessed and disrupted its IT network. The incident potentially exposed employee and prospective employee PII, including names and employment data. Citi Trends engaged outside experts, reset credentials, and offered credit monitoring.

Citi Trends, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-28. 564 Massachusetts residents were affected. The report records the breach type as electronic.

Citi Trends, Inc. notified Montana residents of a security incident occurring on January 14, 2023, where a third party accessed its IT network. The breach potentially exposed employee and prospective employee PII, including names and employment data. Citi Trends engaged forensic experts, reset credentials, and offered credit monitoring services.

Citi Trends, Inc. reported a data breach to the Maine Attorney General affecting 285 Maine residents. The breach occurred on January 14, 2023, and was discovered on June 13, 2023. The incident involved an external system breach (hacking) resulting in the acquisition of names and Social Security Numbers. Citi Trends provided written notification and offered one year of identity theft protection services.

On or about January 14, 2023, an unauthorized third party entered and disrupted Citi Trends, Inc.'s IT network, gaining the ability to extract data including files containing employee and prospective employee information (names and other employment-related details). The company responded by changing passwords, blocking access, and engaging outside technical experts. Affected individuals were offered Experian credit monitoring and identity theft insurance.

Citi Trends, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-12 and was reported on 2023-06-22. 5,307 Indiana residents were affected.

Citi Trends, Inc. experienced a ransomware attack by the Hive group on January 14, 2023, disrupting back office and distribution center IT systems. The FBI and DOJ disrupted the Hive network on January 26, 2023, and provided tools for system restoration. The company confirmed that sensitive customer data is not retained on its systems and that stores and financial systems remained operational. The impact was not material to Q4 FY2022 results.