SVANACO, INC.

Svanaco, Inc. dba Americaneagle.com reported a data breach to the Oregon Attorney General. The breach was reported on 2023-04-04. The breach occurred during 7/13/2022 - 12/9/2022. The breach was discovered on 3/1/2023. 105,008 individuals were affected. Notice was sent on 3/29/2023.

Svanaco, Inc. dba Americaneagle.com reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-30. 1,728 Massachusetts residents were affected. The report records the breach type as electronic.

Svanaco, Inc. dba Americaneagle.com, a commercial entity, experienced an external system breach (hacking) that was discovered on March 1, 2023. The breach, which occurred on July 13, 2022, affected 463 Maine residents. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers, along with their respective security codes, access codes, passwords, or PINs. Written notifications were sent to the affected consumers on March 29, 2023. No identity theft protection services were offered.

Svanaco, Inc. d/b/a Americaneagle.com notified Washington AG of a data security incident affecting 1,475 residents. Unauthorized access to payment card data (numbers, expiration, CVV) occurred between July 13 and December 9, 2022. The company engaged forensic investigators and notified law enforcement and card brands.

Svanaco, Inc. dba Americaneagle.com reported a data breach to the Oregon Attorney General. The breach was reported on 2023-03-30.

Svanaco, Inc. d/b/a Americaneagle.com notified customers of a data security incident affecting the Beretta USA e-commerce platform. Unauthorized access occurred between July 13 and December 5, 2022, exposing payment card data. The company engaged forensic investigators and reported the incident to law enforcement and card brands.

Svanaco, Inc. d/b/a Americaneagle.com notified consumers of a data breach affecting its Beretta.com e-commerce platform. Unauthorized access occurred between July 13, 2022, and December 5, 2022, exposing names, payment card numbers, expiration dates, and security codes. The company engaged forensic investigators and notified law enforcement and card brands.

Svanaco, Inc. d/b/a AmericanEagle.com notified the Idaho Attorney General of a data security incident affecting 27 Idaho residents. The incident involved unauthorized access to payment card information (names, card numbers, expiration dates, security codes) processed through the e-commerce platform for www.leonisa.com between July 13, 2022, and December 9, 2022. The company engaged forensic investigators, secured platforms, and reported the incident to payment card brands and law enforcement.

Svanaco, Inc. (dba Americaneagle.com) disclosed that an unauthorized actor used compromised employee credentials to install malicious code on the Nueske's e-commerce platform hosted by Americaneagle.com. The malware captured payment card information (names, card numbers, expiration dates, security codes) for transactions processed between July 25, 2022, and December 9, 2022. The incident was detected on November 16, 2022. The company engaged forensic investigators, secured the store, and notified payment card brands and law enforcement.

Svanaco, Inc. d/b/a Americaneagle.com notified Montana residents of a data incident affecting Beretta USA's e-commerce platform. Unauthorized access occurred between July 13 and December 5, 2022, exposing payment card data. Discovery was November 16, 2022. Forensic investigation confirmed access. No specific count of affected individuals was disclosed in this letter.

Svanaco, Inc dba Americaneagle.com reported a data breach to the Indiana Attorney General. The breach occurred on 2022-07-13 and was reported on 2023-03-29. 1,748 Indiana residents were affected. 105,008 individuals affected in total.

AMERICANEAGLE.COM filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-224). The register records the breach as discovered on July 13, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.