HackingRetail & ConsumerRetailCustomer Data InvolvedFinancial accountLowContained

Schwaab, Inc

bd_2e5d31cf0fd3b89a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 11, 2016

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Schwaab, Inc →

Schwaab. Inc. (operating as Discount Rubber Stamps.Com) notified customers of unauthorized access to its computer system between January 22, 2014, and February 8, 2016. Forensic investigators found no evidence that credit card information was accessed or stolen, but customers were notified as a precaution. The company implemented additional security measures and cooperated with the FBI, which directed a delay in notification.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 22, 2014

Begins

Apr 11, 2016

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Washington State AGbd_30789f01a8f767982016-04-11Verified
Oregon State AGbd_718b2c1bc42741e82016-04-11Candidate
Massachusetts State AGbd_a2db57434f9ce9dc2016-04-15 · +4dVerified

Name: Schwaab, Inc
norm: schwaab
Domain: schwaab.com

Name: Schwaab, Inc
norm: schwaab
Domain: schwaab.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 22, 2014 – Feb 8, 2016
Materiality determined: —
Notification sent: Apr 13, 2016
Affected individuals: Not disclosed
Data types: Financial account
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Required to delay notification to customers under the direction of the Federal Bureau of Investigation

During the incident: Immediately took steps to resolve the incident and prevent the unauthorized access to our system
Implemented additional security measures designed to prevent a recurrence of such an attack, to quickly identify unusual activity, and to further protect the privacy of your information
Actively working with forensic investigators, state attorney generals and law enforcement
Changes made: Implemented additional security measures designed to prevent a recurrence of such an attack, to quickly identify unusual activity, and to further protect the privacy of your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Washington State AGApr 11 · first

Oregon State AGApr 11 · first

California State AGApr 11 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-60906
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 11, 2016
Raw hash: 920574f68bebd9388693ebfc9589b4c1d131e816d06efd8d8d7d487bfce9229f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySchwaab, Inc

Victim entitySchwaab, Inc

IncidentUnauthorized Access

Stated responseImmediately took steps to resolve the incident and prevent the unauthorized access to our system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov