HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

Fabric Depot

bd_0a873f2fb3a04536 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 16, 2012

Filed

Mar 1, 2013

To disclose

19 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Fabric Depot →

Fabric Depot, Inc. disclosed that an unauthorized third party gained access to its website and data system on or about October 16, 2012. The incident potentially exposed credit card information, names, and billing addresses associated with online purchases. The company engaged a forensic investigator and notified law enforcement. Remediation included changing the online payment process to use trusted third-party processors.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 16, 2012 → Notified Feb 28, 2013135d ✗ CA 60-day late19 weeks discovery → filing

Incident timeline

discovery → filing · 19 weeks / 136 days

Oct 16, 2012

Begins

Oct 16, 2012

Discovered

Mar 1, 2013

Filed

vs. sector median

+12 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_2473727e3d3fb79d2013-03-04 · +3dVerified

Name: Fabric Depot
norm: fabric depot
Domain: fabricdepot.com

Name: Fabric Depot
norm: fabric depot
Domain: fabricdepot.com
Industry: Retail & Consumerllm

Discovered: Oct 16, 2012
Breach occurred: Oct 16, 2012
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 28, 2013
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Retained a forensic computer investigator
Notified law enforcement
Cooperating with their investigation
Changes made: Changing our entire online payment process to have all credit card information submitted through our website collected and handled by trusted third party payment processors
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(136 days from discovery to filing)
Compliance flags: CA 60-day late · 135d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 16, 2012
→ Notified: Feb 28, 2013
135d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 16, 2012 → Notified: Feb 28, 2013	135d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGMar 1 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-39040
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 1, 2013
Raw hash: 1c262f7266de4befb92b3e96a7110600448a03df97ee23f2141c00d8b3cb75e7

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFabric Depot

Victim entityFabric Depot

Incidentdiscovered Oct 16, 2012

Stated responseRetained a forensic computer investigator

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov