Latest / California / December 2021

Heirloom Roses

Heirloom Roses notified California AG on Dec 17, 2021 of a data breach, which occurred on Oct 26, 2021. Data exposed: Financial / bank account, Name.

All 2 filings by Heirloom Roses, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Heirloom Roses
Source
California AG · source record
Date reported
Dec 17, 2021
Date(s) of breach
Wednesday, February 24, 2021Tuesday, October 26, 2021
Residents affected
Not published by this source
Data exposed
Financial / bank account Name
Notice letter
Sample notice (PDF)
Discovered
February 2021, as stated in the letter
"Our investigation confirmed that malicious code was added to the Heirloom Roses website for the purpose of capturing credit card data beginning in February 2021, which may have continued intermittently until as late as October 26, 2021."
Days to notice
52 days from the end of the breach window (Oct 26, 2021, no discovery date in the letter) to the California record (Dec 17, 2021). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Offered in the letter
credit or identity monitoring through Experian
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-10-30 16:04 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:04 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Heirloom Roses

OrganizationSourceStateReportedResidents affectedData exposed
Heirloom Roses Oregon DOJ OR Dec 17, 2021 52,206 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.