HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
The Online Traffic School
bd_3752caaf0afd91ec · schema v1 · pii pii-v1
Full breach record for The Online Traffic School →The Online Traffic School discovered unauthorized access to its computer network on July 26, 2017. The incident may have exposed customers' names, addresses, email addresses, payment card numbers, expiration dates, and website usernames/passwords. The company blocked access, engaged forensic investigators, and notified payment card networks.
California clockDiscovered Jul 26, 2017 → Notified Sep 29, 201765d ✗ CA 60-day late9 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7cd7e477a4d47dbcOregon State AGfiled 2017-09-29Candidate
- bd_ee76450fcc51bb04Washington State AGfiled 2017-09-29Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-102294
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2017
- Raw hash
- 654165af35aa9c646c818b9d9565c931f61602d5fc7ec30f91d73e95416d7d2f
Reporting entity
- Name
- The Online Traffic Schoolnorm: the online traffic school
Victim entity
- Name
- The Online Traffic Schoolnorm: the online traffic school
Incident
- Discovered
- Jul 26, 2017
- Materiality determined
- —
- Notification sent
- Sep 29, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- CA 60-day late · 65d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 26, 2017→ Notified: Sep 29, 201765d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.