Carters Inc.

Children’s Apparel Giant Carter compromised the personal data of more than 410,000 customers in a cyber incident in March 2021.

The information was compromised by shortened URLs sent by partner vendor Linc, which helps the firm to automate online purchases.

The compromised information includes the full names, physical addresses, email addresses, phone numbers, shipment tracking IDs, and transaction details of customers dating as far back as 2015.

Source: https://securityboulevard.com/2021/06/bitglass-security-spotlight-data-breaches-and-hacks-across-industries-and-a-ransomware-payment-recovery/

TPRM report: https://scoringcyber.rankiteo.com/company/carter's-oshkosh-bgosh

"id": "car162111322",
"linkid": "carter's-oshkosh-bgosh",
"type": "Breach",
"date": "03/2021",
"severity": "90",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '410,000',
                        'industry': 'Apparel',
                        'name': 'Children’s Apparel Giant Carter',
                        'type': 'Retail'}],
 'attack_vector': 'Shortened URLs',
 'data_breach': {'number_of_records_exposed': '410,000',
                 'personally_identifiable_information': ['full names',
                                                         'physical addresses',
                                                         'email addresses',
                                                         'phone numbers'],
                 'type_of_data_compromised': ['full names',
                                              'physical addresses',
                                              'email addresses',
                                              'phone numbers',
                                              'shipment tracking IDs',
                                              'transaction details']},
 'date_detected': 'March 2021',
 'description': 'Children’s Apparel Giant Carter compromised the personal data '
                'of more than 410,000 customers in a cyber incident in March '
                '2021. The information was compromised by shortened URLs sent '
                'by partner vendor Linc, which helps the firm to automate '
                'online purchases. The compromised information includes the '
                'full names, physical addresses, email addresses, phone '
                'numbers, shipment tracking IDs, and transaction details of '
                'customers dating as far back as 2015.',
 'impact': {'data_compromised': ['full names',
                                 'physical addresses',
                                 'email addresses',
                                 'phone numbers',
                                 'shipment tracking IDs',
                                 'transaction details']},
 'title': 'Data Breach at Children’s Apparel Giant Carter',
 'type': 'Data Breach'}