DisclosureLens
HackingRetail & ConsumerRetailData ExfiltratedDelayed DiscoveryGovernment IDIdentity (basic)CriticalResolved

CALIFORNIA PIZZA KITCHEN, INC.

bd_0c23fed7040911da · schema v1 · pii pii-v1

Severity

Critical

Discovered

Oct 13, 2021

Filed

Nov 15, 2021

To disclose

5 weeks

Affected · nationwide

103,7678 in this filing

Linked

10 filings

Confidence

65%
Full breach record for CALIFORNIA PIZZA KITCHEN, INC. →

California Pizza Kitchen experienced an external system breach in September 2021, which was discovered in October 2021. The breach affected 103,767 individuals and involved the acquisition of names and Social Security Numbers. The company provided written notification to those affected and offered credit monitoring and identity theft protection services.

Maine clockDiscovered Oct 13, 2021 → Filed with AG Nov 15, 202133d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 28 days
discovery → filing · 5 weeks / 33 days

Sep 15, 2021

Begins

Oct 13, 2021

Discovered

Nov 15, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 318d gap

Filing propagation · 10 filings · 10 states

View merged incident ↗
Illinois State AGJan 1 · first
Indiana State AG+318d
California State AG+318d
Delaware State AG+318d
Washington State AG+318d
Massachusetts State AG+318d
Hawaii State AG+318d
Montana State AG+318d
Oregon State AG+318d
Maine State AG+318d · this page

Pattern: first filing Jan 1 (IL), last Nov 15 (ME) — a 318-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.