HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
ACTIVEOutdoors
bd_0043817ab2e52546 · schema v1 · pii pii-v1
Full breach record for ACTIVEOutdoors →ACTIVEOutdoors disclosed unauthorized access to its online hunting and fishing licensing applications in Idaho, Oregon, and Washington. The company became aware of the incident on August 22, 2016. Affected data included names, addresses, dates of birth, driver's license numbers, and Social Security numbers for accounts created prior to 2006/2007. No financial data was involved. The company engaged a cybersecurity firm, coordinated with state agencies, and offered two years of identity protection services to affected individuals.
California clockDiscovered Aug 22, 2016 → Notified Sep 19, 201628d ✓ CA 60-day OK28 days discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_006cc551e8755418Oregon State AGfiled 2016-09-19Candidate
- bd_64c2e5eba05780baMontana State AGfiled 2016-09-19Verified
- bd_c13c6eb011bc7653New Hampshire State AGfiled 2016-09-19Verified
- bd_ecb93ee8934ad17aWashington State AGfiled 2016-09-19Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-63929
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2016
- Raw hash
- 577ccdca6ed517dc1930d5ba7913990c4216f535d3a4ed5afe692561eb876b67
Reporting entity
- Name
- ACTIVEOutdoorsnorm: activeoutdoors
Victim entity
- Name
- ACTIVEOutdoorsnorm: activeoutdoors
Incident
- Discovered
- Aug 22, 2016
- Materiality determined
- —
- Notification sent
- Sep 19, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Coordinated with impacted states (Idaho, Oregon, Washington)Working with relevant state agencies and law enforcement
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 28d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 22, 2016→ Notified: Sep 19, 201628d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.