On March 21, 2017, the California Office of the Attorney General reported a data breach involving Rent the Runway. An unknown party accessed the account between December 25, 2016, and February 23, 2017. The accessed information included email addresses, first names, last names, birthdays, and mailing addresses, though no credit card information was exposed.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-67055
TPRM report: https://www.rankiteo.com/company/rent-the-runway
"id": "ren654072525",
"linkid": "rent-the-runway",
"type": "Breach",
"date": "12/2016",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Fashion',
'name': 'Rent the Runway',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'personally_identifiable_information': True,
'type_of_data_compromised': ['email addresses',
'first names',
'last names',
'birthdays',
'mailing addresses']},
'date_detected': '2017-02-23',
'date_publicly_disclosed': '2017-03-21',
'description': 'Unauthorized access to Rent the Runway accounts resulting in '
'the exposure of personal information.',
'impact': {'data_compromised': ['email addresses',
'first names',
'last names',
'birthdays',
'mailing addresses']},
'references': [{'date_accessed': '2017-03-21',
'source': 'California Office of the Attorney General'}],
'threat_actor': 'Unknown',
'title': 'Rent the Runway Data Breach',
'type': 'Data Breach'}