HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Healing Touch Day Spa Inc./Whatgreatskin.com
bd_21daec4380da1030 · schema v1 · pii pii-v1
Full breach record for Healing Touch Day Spa Inc./Whatgreatskin.com →Healing Touch Day Spa Inc./Whatgreatskin.com reported an organized attack on its servers on August 28, 2012. The incident potentially compromised customer names, addresses, and credit card details. The company took the site offline, wiped credit card data from its database, and initiated a security audit. No specific count of affected individuals was disclosed in the notification.
California clockDiscovered Aug 28, 2012 → Notified Aug 28, 2012✓ CA 60-day OK14 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-36413
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2012
- Raw hash
- 25de4492196973866196f6c3c78fa843addbecfad1002d3835f7f71ae65edcab
Reporting entity
- Name
- Healing Touch Day Spa Inc./Whatgreatskin.comnorm: healing touch day spa inc whatgreatskincom
- Domain
- whatgreatskin.com
Victim entity
- Name
- Healing Touch Day Spa Inc./Whatgreatskin.comnorm: healing touch day spa inc whatgreatskincom
- Domain
- whatgreatskin.com
Incident
- Discovered
- Aug 28, 2012
- Materiality determined
- —
- Notification sent
- Aug 28, 2012
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- CA 60-day OK
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 28, 2012→ Notified: Aug 28, 2012— 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.