Tatcha

Disclosed May 9, 20174,300 affectedConfirmed

What is known

People affected	4,300 (as reported by the organization)
Disclosed	May 9, 2017
Happened	Jan 8, 2017
Attack	Not stated
Data exposed	NamesPayment cardsFinancialPasswords
Sector	Other · US
Status	Confirmed

History of this record

data_types2026-09-25

[] to ["names","payment-card","financial","passwords"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 4300by backfillSource

disclosed2026-09-25

2017-05-16 to 2017-05-09by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.