AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Shutterstock Music Canada ULC
bd_09bd1b8875d67db5 · schema v1 · pii pii-v1
Full breach record for Shutterstock Music Canada ULC →Shutterstock Music Canada ULC d/b/a PremiumBeat discovered a security bug in third-party software on September 29, 2016, resulting in unauthorized access to user information. The incident exposed names, addresses, phone numbers, email addresses, and encrypted passwords. The company locked affected accounts, requested password resets, and hardened security measures. No financial data was stored or compromised.
California clockDiscovered Sep 29, 2016 → Notified Oct 4, 20165d ✓ CA 60-day OK21 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-64473
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 20, 2016
- Raw hash
- 3402f2c18c0e5abdc5a2c187e6b009aba041d3b298a77454a8859cc1477c9c25
Reporting entity
- Name
- Shutterstock Music Canada ULCnorm: shutterstock music canada ulc
- Domain
- premiumbeat.com
Victim entity
- Name
- Shutterstock Music Canada ULCnorm: shutterstock music canada ulc
- Domain
- premiumbeat.com
Incident
- Discovered
- Sep 29, 2016
- Materiality determined
- —
- Notification sent
- Oct 4, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Third party
- via Third party software provider
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 5d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 29, 2016→ Notified: Oct 4, 20165d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.