HackingVulnerability ExploitTargetedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
R.R. Bowker LLC
bd_3851f0125b1b7c1b · schema v1 · pii pii-v1
Full breach record for R.R. Bowker LLC →R.R. Bowker LLC notified California AG that unauthorized code was added to the checkout page of www.myidentifiers.com between May 1, 2018 and October 23, 2018. The code copied customer names, addresses, emails, and payment card details (including CVV). Bowker engaged a cybersecurity firm, removed the code, enhanced website security, and cooperated with law enforcement.
California clockDiscovered Oct 23, 2018 → Notified Nov 16, 201824d ✓ CA 60-day OK28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_19d3fb359cf5f664Oregon State AGfiled 2018-11-20Candidate
- bd_868944b4944ff233Montana State AGfiled 2018-11-20Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-141950
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2018
- Raw hash
- f328657c688d580244b76a4c4f08d4db2afc64a0cb08db47b08c0a37285a2dee
Reporting entity
- Name
- R.R. Bowker LLCnorm: rr bowker
Victim entity
- Name
- R.R. Bowker LLCnorm: rr bowker
Incident
- Discovered
- Oct 23, 2018
- Materiality determined
- —
- Notification sent
- Nov 16, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 23, 2018→ Notified: Nov 16, 201824d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.