Francesca’s Services Corporation

The Washington State Office of the Attorney General reported a data breach involving Francesca's Services Corporation on November 19, 2018. The breach occurred between December 28, 2017, and July 9, 2018, potentially affecting 1,148 Washington residents by capturing sensitive information during the checkout process due to unauthorized code present in a third-party vendor's application.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10599

TPRM report: https://www.rankiteo.com/company/francesca-s-

"id": "fra502072925",
"linkid": "francesca-s-",
"type": "Breach",
"date": "12/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1,148',
                        'industry': 'Retail',
                        'location': 'Washington',
                        'name': "Francesca's Services Corporation",
                        'type': 'Corporation'}],
 'attack_vector': "Unauthorized code in third-party vendor's application",
 'data_breach': {'number_of_records_exposed': '1,148',
                 'type_of_data_compromised': 'Sensitive information during '
                                             'checkout process'},
 'date_detected': '2018-11-19',
 'date_publicly_disclosed': '2018-11-19',
 'description': 'The Washington State Office of the Attorney General reported '
                "a data breach involving Francesca's Services Corporation on "
                'November 19, 2018. The breach occurred between December 28, '
                '2017, and July 9, 2018, potentially affecting 1,148 '
                'Washington residents by capturing sensitive information '
                'during the checkout process due to unauthorized code present '
                "in a third-party vendor's application.",
 'impact': {'data_compromised': 'Sensitive information during checkout '
                                'process'},
 'references': [{'date_accessed': '2018-11-19',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': "Data Breach at Francesca's Services Corporation",
 'type': 'Data Breach',
 'vulnerability_exploited': "Unauthorized code in third-party vendor's "
                            'application'}