Skip to content

Tatcha

Disclosed May 9, 20179 years ago4,300 affectedConfirmed

Official notice

What is known

People affected4,300 (as reported by the organization)
DisclosedMay 9, 2017
HappenedJan 8, 2017
AttackNot stated
Data exposedNames, Payment cards, Financial, Passwords
SectorOther · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Tatchaoag.ca.gov · Official notice
Indiana Attorney General 2017 data breach report: Tatchain.gov · Official notice
Maine Attorney General breach notice archive: Tatchamaine.gov · Official notice

Notices filed

WhereFiledPeople
Indiana AGresidents of INMay 9, 201736
Maine AGresidents of MEMay 9, 201710
California AGresidents of CAMay 16, 2017
History of this record
  • 2026-09-25 · data_types: [] to ["names","payment-card","financial","passwords"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 4300 · backfill source
  • 2026-09-25 · disclosed: 2017-05-16 to 2017-05-09 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Tatcha

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.