The LoveSac Company

The LoveSac Company notified the New Hampshire Attorney General of a data event affecting 6 NH residents. Unauthorized access occurred between Feb 12 and Mar 3, 2025, involving copying of files containing names and SSNs. LoveSac became aware on Feb 28, 2025. Response included notifying federal law enforcement, providing 24 months of Experian credit monitoring, and reviewing security policies. Investigation is ongoing.

The LoveSac Company reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-12 and was reported on 2025-09-04. 28 Indiana residents were affected. 1,840 individuals affected in total.

The LoveSac Company reported a data breach to the Indiana Attorney General. The breach occurred on 2025-05-27 and was reported on 2025-09-04. 42 Indiana residents were affected. 2,299 individuals affected in total.

Between May 27–30, 2025, an unauthorized actor gained access to one employee's email account at The LoveSac Company, a furniture retailer. The breach was discovered on May 30, 2025. Information potentially exposed includes names and Social Security numbers. Seven Maine residents were affected and notified on September 4, 2025. LoveSac is offering 24 months of Experian IdentityWorks credit monitoring to affected individuals.

Between February 12 and March 3, 2025, an unauthorized external actor accessed The LoveSac Company's network environment and copied files containing customer names and Social Security numbers. Suspicious activity was first detected on approximately February 28, 2025. Five Maine residents were affected. Written notification was provided on September 4, 2025. LoveSac notified federal law enforcement and offered 24 months of Experian IdentityWorks credit monitoring to affected individuals.

The LoveSac Company notified consumers of a cybersecurity incident occurring between Feb 12 and Mar 3, 2025. An unauthorized actor accessed systems and copied files containing names and other personal information. The company offered 24 months of credit monitoring via Experian. Rhode Island residents were specifically noted as impacted.

The LoveSac Company notified the New Hampshire Attorney General of a data event affecting 12 state residents. Between May 27 and May 30, 2025, an unauthorized actor accessed one employee's email account, potentially exposing names and Social Security numbers. LoveSac discovered the suspicious activity on May 30, 2025, and provided notices to affected residents on September 4, 2025. Response measures included 24 months of complimentary credit monitoring via Experian and enhanced employee safeguards.

LoveSac is a U.S-based company specializing in modern furniture products. Their product line includes original foam-filled Lovesac bean bags and modular, adjustable Sactionals. These pieces offer customization in design and are made with sustainability in mind. Additionally, Lovesac provides a range of home accessories like blankets, footsacs, and pillows. Their products combine comfort, durability, and an eco-friendly ethos.

LoveSac is a U.S-based company specializing in modern furniture products. Their product line includes original foam-filled Lovesac bean bags and modular, adjustable Sactionals. These pieces offer customization in design and are made with sustainability in mind. Additionally, Lovesac provides a range of home accessories like blankets, footsacs, and pillows. Their products combine comfort, durability, and an eco-friendly ethos.

The LoveSac Company notified consumers of a phishing incident affecting one employee's email account between May 27-30, 2025. The incident may have exposed customer names and other personal information. The company investigated, secured systems, and is offering 24 months of credit monitoring. Approximately 7 Rhode Island residents are impacted.

On July 27, 2023, The Lovesac Company discovered an inadvertent disclosure of personal information affecting 208 individuals, including two Maine residents. The compromised data included names and Social Security numbers. The company notified the affected individuals on August 30, 2023, and offered 24 months of credit monitoring and identity restoration services through Experian.