Zulily, Inc.
ent_019e61b80b47be03ae76d7d89974ef0d
Disclosures
6
State AG · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
24,492
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Zulily, Inc.
- Normalized
- zulily— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300X58PEOKJRRI910
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- Maine State AGas victim2022-07-22
Zulily, LLC reported a data breach impacting 24,492 individuals due to insider wrongdoing. The breach occurred between February 23, 2022, and June 15, 2022, and was discovered on June 26, 2022. The compromised information included names and financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Affected individuals were notified in writing on July 22, 2022.
- Montana State AGas victim2022-07-22
Zulily, LLC disclosed a misconfiguration incident where checkout code sent customer transaction data (including PCI data) to an unauthorized payment processor. The incident occurred between Feb 23 and June 15, 2022. Zulily discovered the issue on June 26, 2022, corrected the code, notified processors, and issued refunds for duplicate shipping charges.
- Indiana State AGas victim2022-07-22
Zulily, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-02-23 and was reported on 2022-07-22. 453 Indiana residents were affected. 24,492 individuals affected in total.
- Oregon State AGas victim2022-07-22
Zulily, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2022-07-22. The breach occurred during 2/23/2022 - 6/15/2022. The breach was discovered on 6/26/2022. 24,492 individuals were affected. Notice was sent on 7/22/2022.
- Massachusetts State AGas victim2022-07-22
Zulily, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-07-22. 634 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2022-07-22
Zulily, LLC disclosed a data breach caused by a coding error on its website checkout page. Between February 23, 2022, and June 15, 2022, transaction information for some customers was inadvertently sent to an unauthorized second payment card processor. The exposed data included email addresses, payment card numbers, card verification codes, and expiration dates. Zulily corrected the code, notified the processors, and is issuing refunds for duplicate shipping and handling charges. No malicious actor was involved; this was an internal error.