Arhaus, LLC

On February 10, 2023, the Vermont Office of the Attorney General reported a data breach involving Arhaus, LLC. The breach involved unauthorized access to employee email accounts between October 3, 2022, and October 19, 2022. An email or attachment containing a personal name and other data elements was identified as potentially exposed, although the total number of individuals affected remains unknown.

Source: https://ago.vermont.gov/document/2023-02-10-arhaus-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/arhaus-furniture

"id": "arh249072625",
"linkid": "arhaus-furniture",
"type": "Breach",
"date": "10/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Retail',
                        'name': 'Arhaus, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'type_of_data_compromised': ['Personal Names',
                                              'Other Data Elements']},
 'date_detected': '2023-02-10',
 'date_publicly_disclosed': '2023-02-10',
 'description': 'Unauthorized access to employee email accounts between '
                'October 3, 2022, and October 19, 2022, potentially exposing '
                'personal names and other data elements.',
 'impact': {'data_compromised': ['Personal Names', 'Other Data Elements'],
            'systems_affected': ['Employee Email Accounts']},
 'references': [{'date_accessed': '2023-02-10',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Arhaus, LLC',
 'type': 'Data Breach'}