Tatcha

Tatcha, LLC disclosed that an unauthorized person gained access to information entered into the Tatcha checkout process during early 2017. The incident, discovered in mid-April 2017, potentially exposed credit card numbers, CVVs, email addresses, passwords, and names/addresses. Tatcha contained the intrusion, took the site offline for maintenance, reported to law enforcement, and offered 24 months of identity protection services to affected customers.

Tatcha, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-05-12. 138 Massachusetts residents were affected. The report records the breach type as electronic.

Tatcha, LLC notified the NH Attorney General of a data security incident in April 2017. Unauthorized individuals accessed information entered via the Tatcha checkout process, including names, credit card numbers, emails, and passwords. 18 NH residents were identified as potentially impacted. Tatcha contained the intrusion, notified law enforcement, and provided 24 months of identity protection services.

Tatcha notified Montana residents of a data breach in early 2017 where an unauthorized party accessed information entered during the checkout process, including credit card details, passwords, and PII. Tatcha detected the incident in mid-April 2017, engaged law enforcement, and provided 24 months of identity protection services via AllClear ID.