PhysicalRetail & ConsumerRetailTheftCustomer Data InvolvedPIIIdentity (basic)Financial accountMediumResolved

OAHU PUBLICATIONS, INC.

bd_2e56072fca560305 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 4, 2014

Filed

Feb 20, 2015

To disclose

37 weeks

Affected

3,543state residents only

Confidence

66%

Full breach record for OAHU PUBLICATIONS, INC. →2 incidents on file

Oahu Publications, Inc. reported the theft of two boxes of paper records from an offsite storage unit in April 2014. The records contained names, mailing addresses, and credit card numbers for 3,543 customers who paid for advertisements between May and August 2012. The breach was discovered in June 2014 after police recovered one box. Notices were mailed to affected customers on February 10, 2015, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due37 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 64 days

discovery → filing · 37 weeks / 261 days

Apr 1, 2014

Begins

Jun 4, 2014

Discovered

Feb 20, 2015

Filed

vs. sector median

+30 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,543 affectedView incident

Name: OAHU PUBLICATIONS, INC.
norm: oahu publications

Name: OAHU PUBLICATIONS, INC.
norm: oahu publications
Industry: Retail & Consumerllm

Discovered: Jun 4, 2014
Breach occurred: Apr 1, 2014 – Apr 30, 2014
Undetected for: 64 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 10, 2015
Affected individuals: 3,543state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified State Office of Consumer ProtectionNotified Equifax, TransUnion and Experian

During the incident: Communicating with law enforcement and consumer protection authorities
Made arrangements with a credit reporting bureau for credit monitoring services
Retained a vendor to mail notices to the affected customers
Providing Equifax, TransUnion and Experian with information on the timing, distribution and content of the notice
Changes made: Implemented various measures, including enhanced security protections to safeguard our customers' personal information from further unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(261 days from discovery to filing)
Compliance flags: HI CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2015/12/OCP-2015-0104.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2015
Raw hash: 2092f46c17377fa0a6aa4a387efcd1231a48276e368b9a2e0b7c661cc6e667b9

Reporting entityOAHU PUBLICATIONS, INC.

Victim entityOAHU PUBLICATIONS, INC.

Incidentdiscovered Jun 4, 2014

Stated responseCommunicating with law enforcement and consumer protection authorities

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org