Latest / California / May 2021

Sugarfina USA, LLC

Sugarfina USA, LLC notified California AG on May 25, 2021 of a data breach, which occurred on Sep 3, 2020. Data exposed: Financial / bank account, Usernames / passwords, Postal address, Name.

All 2 filings by Sugarfina USA, LLC, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Sugarfina USA, LLC
Source
California AG · source record
Date reported
May 25, 2021
Date(s) of breach
Friday, November 1, 2019Thursday, September 3, 2020
Residents affected
Not published by this source
Data exposed
Financial / bank account Usernames / passwords Postal address Name
Notice letter
Sample notice (PDF)
Discovered
Jan 15, 2021, as stated in the letter
"On or around January 15, 2021, the investigation determined that Sugarfina was the victim of a sophisticated cyber-attack and on March 25, 2021 determined that this attack may have allowed unauthorized actors to gain access to certain cu..."
Days to notice
130 days from discovery (Jan 15, 2021) to the California record (May 25, 2021). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
First seen by BreachTally
2026-10-30 16:06 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:06 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Sugarfina USA, LLC

OrganizationSourceStateReportedResidents affectedData exposed
Sugarfina USA, LLC Oregon DOJ OR May 25, 2021 39,794 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.