Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Hanesbrands Inc.
  • Street Address: 1000 E. Hanes Mill Road
  • City: Winston-Salem
  • State, or Country if outside the US: NC
  • Zip Code: 27105

Submitted By

  • Name: Colleen Brown
  • Title: Partner
  • Firm name (if different than entity): Sidley Austin LLP
  • Telephone Number: (202) 736-8465
  • Email Address: ctbrown@sidley.com
  • Relationship to entity whose information was compromised: Outside counsel

Breach Information

  • Total number of persons affected (including residents): As described in the initial notice to you on August 16,2022, HBI experienced a ransomware incident on May 24, 2022 and our manual review of data and rolling notification was ongoing and at that time identified 109 Maine residents. As an update, our review of the data is now complete and we identified an additional 77 Maine residents.
  • Total number of Maine residents affected: Since our prior notice to you on August 16, 2022, our manual review of the data is complete and we identified approximately 75,106 US residents.
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: No
  • Date(s) Breach Occured: 05/24/2022
  • Date Breach Discovered: 05/24/2022
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Driver's License Number or Non-Driver Identification Card Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 08/16/2022, 09/30/2022, 11/23/2022
  • Copy of notice to affected Maine residents: EXPERIAN_i2038_Hanesbrands Inc_L01_SAS_2 August.pdf
  • Date of any previous (within 12 months) breach notifications: This is a supplemental notice for the same incident we notified your office about on August 16, 2022.
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24 months, Experian, IdentityWorks