HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
T3 Micro
bd_0793589ece66ec8e · schema v1 · pii pii-v1
Full breach record for T3 Micro →T3 Micro Inc. disclosed a cyber-attack on its e-commerce website (www.t3micro.com) occurring between July 13, 2018, and March 17, 2019. Malware compromised credit and debit card data, including cardholder names, addresses, card numbers, expiration dates, and CVVs. The company shut down the site, engaged forensic investigators, and notified state regulators. Notifications were sent to affected individuals, with specific legal rights outlined for residents of California, North Carolina, Maryland, New Mexico, and Rhode Island.
California clockDiscovered Mar 14, 2019 → Notified May 6, 201953d ✓ CA 60-day OK10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_6220c76708fcec11Montana State AGfiled 2019-05-20Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147341
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2019
- Raw hash
- c9efba771b9326a6137df3bb55db88f8dcaca8aa6ba3c5e8f6f51029aecdc1c7
Reporting entity
- Name
- T3 Micronorm: t3 micro
- Domain
- t3micro.com
Victim entity
- Name
- T3 Micronorm: t3 micro
- Domain
- t3micro.com
Incident
- Discovered
- Mar 14, 2019
- Materiality determined
- —
- Notification sent
- May 6, 2019
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified state regulators, as required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 53d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 14, 2019→ Notified: May 6, 201953d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.