HackingRetail & ConsumerRetailVulnerability ExploitTargetedIdentity (basic)Financial accountPIILowContained

JB Autosports, Inc.

bd_264b378e4c0e3e1c · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 13, 2016

To disclose

—

Affected

11state residents only

Linked

5 filings

Confidence

64%

Full breach record for JB Autosports, Inc. →

JB Autosports, Inc. notified Montana consumers of a cyberattack on its checkout pages (subispeed.com, ft86speedfactory.com) between Aug 1 and Nov 9, 2015. Attackers intercepted customer names, addresses, and full credit card details (numbers, expiration, CVV) via a Russian IP. The company engaged third-party forensics, improved defenses, and notified card networks.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 1, 2015

Begins

Jan 13, 2016

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_cea101dfa6a03bb62016-01-12 · +1dVerified
Massachusetts State AGbd_6609b1ee5405642f2016-01-19 · +6dVerified
South Carolina State AGbd_7fbec39ca86c1a5e2016-01-19 · +6dVerified
Oregon State AGbd_802114c6f12f7a212016-03-02 · +49dVerified

Name: JB Autosports, Inc.
norm: jb autosports

Name: JB Autosports, Inc.
norm: jb autosports
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Aug 1, 2015 – Nov 9, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 11state-resident count only
Data types: Identity (basic)Financial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Contracting with a third-party vendor to identify the source of the breach and implement security solutions
Improved its cybersecurity defenses
Had major credit card networks and PayPal notified of the breach
Changes made: Newly implemented live monitoring security services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJan 12 · first

Montana State AG+1d · this page

Massachusetts State AG+7d

South Carolina State AG+7d

Oregon State AG+50d

Pattern: first filing Jan 12 (CA), last Mar 2 (OR) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/JB-Autosports-Inc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 13, 2016
Raw hash: b11f1909e02ee28b5b6db23fc137b3783603bc20233f4b25a309cd9cf6a516cf

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJB Autosports, Inc.

Victim entityJB Autosports, Inc.

IncidentUnauthorized Access

Stated responseContracting with a third-party vendor to identify the source of the breach and implement security solutions

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov