HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Water Filters FAST
bd_36832bcab3fb3aa5 · schema v1 · pii pii-v1
Full breach record for Water Filters FAST →Filters Fast LLC, an e-commerce retailer, notified the California Attorney General of a cyber-attack on its website. Attackers injected malicious code on July 15, 2019, capturing customer names, addresses, and payment card data during checkout. The malicious code was removed on July 10, 2020. Approximately 26,093 California residents were notified and offered one year of identity theft protection services.
California clockDiscovered Jul 20, 2020 → Notified Aug 14, 202025d ✓ CA 60-day OK25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_302ed012be90337cDelaware State AGfiled 2020-08-27(13d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-193082
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 14, 2020
- Raw hash
- 540e40aa9eb81725ff25f6861923ecf75ebe527e01a0a977af5dae23ca5c280f
Reporting entity
- Name
- Water Filters FASTnorm: water filters fast
- Domain
- waterfiltersfast.com
Victim entity
- Name
- Water Filters FASTnorm: water filters fast
- Domain
- waterfiltersfast.com
Incident
- Discovered
- Jul 20, 2020
- Materiality determined
- —
- Notification sent
- Aug 14, 2020
- Affected individuals
- 26,093
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted breach notification to California Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 20, 2020→ Notified: Aug 14, 202025d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.