UnknownHigh

TIO Networks USA, Inc.

bd_02f992f16668f2d6 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 10, 2017

Filed

Dec 29, 2017

To disclose

7 weeks

Affected

1,600,000

Linked

7 filings

Confidence

95%

Full breach record for TIO Networks USA, Inc. →2 incidents on file

TIO Networks USA, Inc. (TIO.com), Cricket Wireless LLC, and Pacific Gas and Electric Company reported a data breach to the Oregon Attorney General. The breach was reported on 2017-12-29. The breach occurred during 1/1/2014 - 11/10/2017. The breach was discovered on 11/10/2017. 1,600,000 individuals were affected. Notice was sent on 12/12/201712/23/2017.

J jump to incidentP pin to compareR raw source

Oregon clock✗ OR AG >45d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1409 days

discovery → filing · 7 weeks / 49 days

Jan 1, 2014

Begins

Nov 10, 2017

Discovered

Dec 29, 2017

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

South Carolina State AGbd_6a310201f760a2d62017-12-28 · +1dVerified
California State AGbd_2aca2c6461b4bef62017-12-22 · +7dVerified
Washington State AGbd_540cd56daf55a4912017-12-22 · +7dVerified
New Hampshire State AGbd_853ba53b8cb4c9372017-12-22 · +7dVerified

Show 2 more filings ↓up to 35d gap

Montana State AGbd_ed50467a44eeeed72017-12-12 · +17dCandidate
New Hampshire State AGbd_3e4f96c39f8954b52018-02-02 · +35dVerified

Name: TIO Networks USA, Inc.
norm: tio networks usa
Domain: tio.com

Name: TIO Networks USA, Inc.
norm: tio networks usa
Domain: tio.com

Discovered: Nov 10, 2017
Breach occurred: Jan 1, 2014 – Nov 10, 2017
Undetected for: 1,409 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,600,000nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: OR AG >45d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Montana State AGDec 12 · first

California State AG+10d

Washington State AG+10d

New Hampshire State AG+10d

South Carolina State AG+16d

Oregon State AG+17d · this page

New Hampshire State AG+52d

Pattern: first filing Dec 12 (MT), last Feb 2 (NH) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 29, 2017
Raw hash: 992a9d2f407ba720f38c393f45b9a7a40b0e6ea67bb9c3007651c3de71e1293c

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTIO Networks USA, Inc.

Victim entityTIO Networks USA, Inc.

Incidentdiscovered Nov 10, 2017

ComplianceOR AG >45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov