CafePress

CafePress Inc. notified South Carolina residents of a data security incident occurring on or about February 19, 2019. An unidentified third party obtained unauthorized access to customer information, including names, emails, passwords, SSNs/TINs, and limited credit card data. CafePress engaged outside experts and federal law enforcement, enhanced system security, and moved the affected database. Affected individuals were offered two years of Experian IdentityWorks.

CafePress Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-09-06. 4,643 Massachusetts residents were affected. The report records the breach type as electronic.

CafePress Inc. notified the NH Attorney General of a data security incident discovered on August 6, 2019. Unauthorized access to a customer database may have occurred around February 19, 2019. Approximately 103,990 individuals were affected, including 1,161 NH residents. Compromised data included names, emails, passwords, SSNs/TINs, and partial credit card info. CafePress enhanced security, moved the database, mandated password resets, and offered 2 years of Experian credit monitoring.

CafePress Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2019-09-05. 22,000,000 individuals were affected.

CafePress Inc. notified California residents that an unidentified third party obtained customer information from a database on or about February 19, 2019. Affected data included names, email addresses, passwords, physical addresses, phone numbers, Social Security Numbers, Tax Identification Numbers, and in some cases, the last four digits of credit card numbers and expiration dates. CafePress engaged outside experts, cooperated with federal law enforcement, and moved the affected database. The company offered two years of Experian IdentityWorks credit monitoring and identity theft resolution services.

CafePress Inc. notified Montana AG of a data security incident occurring on or about February 19, 2019. An unidentified third party obtained unauthorized access to customer database information including names, emails, passwords, SSNs/TINs, and in some cases credit card details. CafePress engaged outside experts and federal law enforcement, enhanced system security, and moved the affected database. Affected individuals were offered two years of Experian IdentityWorks.

CafePress, Inc. notified Washington AG of a data breach affecting ~398,148 individuals. Unauthorized access occurred ~Feb 19, 2019; discovered Aug 6, 2019. Data included SSNs, passwords, PII, and partial credit card info. Notifications began Sept 4, 2019. Credit monitoring offered.

CafePress notified customers that an unidentified third party obtained unauthorized access to a database containing personal information on or about February 19, 2019. Affected data included names, email addresses, passwords, physical addresses, phone numbers, Social Security Numbers, Tax Identification Numbers, and in some cases, the last four digits of credit card numbers and expiration dates. CafePress engaged outside experts, cooperated with federal law enforcement, and moved the affected database. The company offered two years of complimentary credit monitoring and identity theft resolution services through Experian.