HackingRetail & ConsumerRetailSkimmerTargetedCustomer Data InvolvedPIIFinancial accountIdentity (basic)LowContained

Service Lighting & Electrical Supplies, Inc.

bd_2a626a173786f3e3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 16, 2025

Filed

Mar 6, 2026

To disclose

5 weeks

Affected

715state residents only

Linked

12 filings

Confidence

68%

Full breach record for Service Lighting & Electrical Supplies, Inc. →

Service Lighting, Inc. notified Washington AG that its e-commerce site was modified with malicious code (skimmers) capturing payment card data (including CVV) between March 12 and September 16, 2025. The company discovered the incident on February 2, 2026, after forensic review. 715 Washington residents were affected. Notices were sent March 4, 2026.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d5 weeks discovery → filing

Incident timeline

undetected · 188 days

discovery → filing · 24 weeks / 171 days

Mar 12, 2025

Begins

Sep 16, 2025

Discovered

Mar 6, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Texas State AGbd_d7188306de15b9782026-03-06Verified by operator
Massachusetts State AGbd_f115bf1c994892752026-03-06Verified
Maine State AGbd_39f9a73ca21d90342026-03-05 · +1dVerified by operator
Oregon State AGbd_629f45567b9be8562026-03-05 · +1dVerified by operator

Show 6 more filings ↓up to 3d gap

California State AGbd_8631ed68eab105d42026-03-05 · +1dVerified by operator
Indiana State AGbd_02734fad6e2361472026-03-04 · +2dCandidate
Nebraska State AGbd_53bcb592073ad9132026-03-04 · +2dVerified
Indiana State AGbd_993241b0848055032026-03-04 · +2dCandidate
Vermont State AGbd_b7103c1db064e70f2026-03-04 · +2dVerified
New Hampshire State AGbd_3b90264d81e98a0e2026-03-09 · +3dVerified

Showing first 10 of 11 linked disclosures.

Name: Service Lighting & Electrical Supplies, Inc.
norm: service lighting electrical supplies

Name: Service Lighting & Electrical Supplies, Inc.
norm: service lighting electrical supplies
Industry: Retail & Consumerllm

Discovered: Sep 16, 2025
Breach occurred: Mar 12, 2025 – Sep 16, 2025
Undetected for: 188 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 4, 2026
Affected individuals: 715state-resident count only
Data types: PIIFinancial accountIdentity (basic)
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 100-199dexposure 100-199d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Indiana State AGMar 4 · first

Nebraska State AGMar 4 · first

Indiana State AGMar 4 · first

Vermont State AGMar 4 · first

Maine State AG+1d

Oregon State AG+1d

California State AG+1d

Texas State AG+2d

Massachusetts State AG+2d

Washington State AG+2d · this page

New Hampshire State AG+5d

Pattern: first filing Mar 4 (IN), last Mar 9 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA36946.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 6, 2026
Raw hash: ff1a21753971eb6c7932cd32defd9408952ffa46425111b85c45ce843e02b60b

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityService Lighting & Electrical Supplies, Inc.

Victim entityService Lighting & Electrical Supplies, Inc.

Incidentdiscovered Sep 16, 2025

Stated responseCommenced a prompt and thorough investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com