Ballistic Products, Inc.
bd_0a9e5025b2e7d8d8 · schema v1 · pii pii-v1
Full breach record for Ballistic Products, Inc. →Ballistic Products, Inc. notified customers of a data breach involving a third-party payment processing vendor. Malware on the vendor's servers captured checkout information (names, payment card numbers, security codes, billing addresses) for transactions between September 18, 2020, and February 3, 2022. The vendor discovered the malware in early February 2022 after notification from another customer. The incident was contained, and identity protection services were offered to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 18, 2020
Begins
Feb 1, 2022
Discovered
Sep 9, 2022
Filed
vs. sector median
+23 wks slower
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Maine State AGbd_aaecbad195251dcd2022-09-13 · +4dVerified
- Oregon State AGbd_c6b9c657e9d72d472022-09-13 · +4dVerified
- Montana State AGbd_6af97512dc8d42cb2022-09-05 · +4dVerified
- Washington State AGbd_cc0ec26377c09de62022-09-03 · +6dCandidate
Show 3 more filings ↓Show fewer ↑up to 12d gap
- Indiana State AGbd_ee76c2033e23652f2022-09-01 · +8dVerified
- New Hampshire State AGbd_4e5f71d683ca579d2022-09-21 · +12dVerified
- Massachusetts State AGbd_ea262a4f9f55c5612022-09-21 · +12dVerified
Filing propagation · 8 filings · 8 states
View merged incident ↗Pattern: first filing Sep 1 (IN), last Sep 21 (MA) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.