Latest / California / September 2019

CafePress Inc.

CafePress Inc. notified California AG on Sep 5, 2019 of a data breach, which occurred on Feb 19, 2019. Data exposed: Social Security number, Financial / bank account, Usernames / passwords, Email address, Tax ID / EIN / ITIN, Phone number, Postal address, Name.

All 2 filings by CafePress Inc., state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
CafePress Inc.
Source
California AG · source record
Date reported
Sep 5, 2019
Date(s) of breach
Tuesday, February 19, 2019
Residents affected
Not published by this source
Data exposed
Social Security number Financial / bank account Usernames / passwords Email address Tax ID / EIN / ITIN Phone number Postal address Name
Notice letter
Sample notice (PDF)
Days to notice
198 days from the end of the breach window (Feb 19, 2019, no discovery date in the letter) to the California record (Sep 5, 2019). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Offered in the letter
24 months of credit or identity monitoring through Experian
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-10-30 16:13 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:13 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by CafePress Inc.

OrganizationSourceStateReportedResidents affectedData exposed
CafePress Inc. Oregon DOJ OR Sep 5, 2019 22,000,000 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.