Thesy, LLC
ent_9413c72ab54b090c7b5cba88
Disclosures
10
State AG · 9 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
226,000
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Thesy, LLC
- Normalized
- thesy— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (10)newest first
- New Hampshire State AGas victim2022-05-25
Thesy LLC d/b/a Element Vape notified the NH AG of a data event affecting 1 NH resident. Malicious code on the website captured credit card info (number, expiry, CVV) for purchases made between Feb 13 and Mar 10, 2022. Code detected Feb 13, 2022. Notice sent May 20, 2022.
- Indiana State AGas victim2022-05-20
Thesy LLC Dba Element Vape reported a data breach to the Indiana Attorney General. The breach occurred on 2022-02-13 and was reported on 2022-05-20. 36 Indiana residents were affected. 1,132 individuals affected in total.
- Massachusetts State AGas victim2022-05-20
Thesy LLC d/b/a Element Vape reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-20. 9 Massachusetts residents were affected. The report records the breach type as electronic.
- Oregon State AGas victim2018-12-05
Thesy, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2018-12-05. The breach occurred during 12/6/2017 - 12/6/2017. The breach was discovered on 9/20/2018. 226,000 individuals were affected. Notice was sent on 11/2/2018.
- California State AGas victim2018-11-28
Thesy, LLC notified customers of a data breach involving its e-commerce platform. A third-party intruder inserted malicious code into the website between December 6, 2017, and June 27, 2018. The company discovered the intrusion on September 20, 2018, and contained it by removing the code and mitigating vulnerabilities. Credit card information of customers who made transactions during the breach window was at risk. The company offered one year of LifeLock identity monitoring services.
- Massachusetts State AGas victim2018-11-26
Thesy, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-11-26. 5,859 Massachusetts residents were affected. The report records the breach type as electronic.
- South Carolina State AGas victim2018-11-26
Thesy, LLC (operating Element Vape) notified customers of a breach where a third-party intruder inserted malicious code into its e-commerce platform between Dec 6, 2017 and Jun 27, 2018. Discovered Sep 20, 2018, the incident potentially exposed credit card information. The company contained the breach, removed the code, notified law enforcement, and offered one year of LifeLock monitoring.
- Washington State AGas victim2018-11-09
Thesy, LLC, an e-commerce retailer, notified Washington AG of a breach affecting 5,907 residents. Unauthorized access occurred Dec 2017–Jun 2018 via malicious code in shopping cart software. Credit card data was at risk. Discovered Sep 2018. Notices sent Nov 2018 offering LifeLock services.
- Hawaii State AGas victim2018-11-08
Thesy, LLC (Element Vape) notified customers of a data breach where a third-party intruder inserted malicious code into its e-commerce platform between Dec 6, 2017 and Jun 27, 2018. The breach was discovered on Sep 20, 2018 and contained on Jun 27, 2018. Customer credit card information was at risk. Thesy notified law enforcement and offered one year of LifeLock identity monitoring.
- Montana State AGas victim2018-11-05
Thesy, LLC (Element Vape) notified customers of a data breach where a third-party intruder inserted malicious code into its e-commerce platform. The intrusion window was December 6, 2017, to June 27, 2018. Customer credit card information was at risk. The breach was contained on June 27, 2018. Thesy notified law enforcement and offered one year of LifeLock monitoring services.