Latest / California / October 2018

Shein

Shein notified California AG on Oct 10, 2018 of a data breach, which occurred on Jun 1, 2018. Data exposed: Usernames / passwords, Email address.

All 2 filings by Shein, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Shein
Source
California AG · source record
Date reported
Oct 10, 2018
Date(s) of breach
Friday, June 1, 2018
Residents affected
Not published by this source
Data exposed
Usernames / passwords Email address
Notice letter
Sample notice (PDF)
Discovered
Aug 22, 2018, as stated in the letter
"LEVICK – Privileged Client Attorney Communications US Press Release Media Contacts: Alex Madison LEVICK amadison@levick.com Ian Lipner LEVICK ilipner@levick.com SHEIN NOTIFIES CUSTOMERS WHO MAY HAVE BEEN AFFECTED BY DATA BREACH BERLIN, G..."
Days to notice
49 days from discovery (Aug 22, 2018) to the California record (Oct 10, 2018). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
Offered in the letter
12 months of credit or identity monitoring
First seen by BreachTally
2026-10-30 16:14 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:14 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Shein

OrganizationSourceStateReportedResidents affectedData exposed
Shein Oregon DOJ OR Oct 11, 2018 6,420,000 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.