MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Easton
bd_38c8373ce83101df · schema v1 · pii pii-v1
Full breach record for Easton →Easton-Bell Sports, Inc. disclosed a malware intrusion affecting vendor servers hosting customer data for online purchases made between Dec 1-31, 2013. The incident exposed names, addresses, phone numbers, emails, and credit card numbers (including CVV). The company shut down servers, rebuilt them, hired forensic specialists, and offered 12 months of identity protection via AllClear ID.
California clockDiscovered Jan 9, 2014 → Notified Jan 17, 20148d ✓ CA 60-day OK8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7e1b69c497fc94cdNew Hampshire State AGfiled 2014-01-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-43834
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 17, 2014
- Raw hash
- fd2ed12340bd80400793829452608c3ec93dd6dba454491827504856b5ab22a0
Reporting entity
- Name
- Eastonnorm: easton
- Domain
- easton.rawlings.com
Victim entity
- Name
- Eastonnorm: easton
- Domain
- easton.rawlings.com
Incident
- Discovered
- Jan 9, 2014
- Materiality determined
- —
- Notification sent
- Jan 17, 2014
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 9, 2014→ Notified: Jan 17, 20148d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.