DisclosureLens
HackingOtherSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsLowContained

The National Wildlife Federation

bd_3c9c6cdde2748cea · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 25, 2019

Filed

May 24, 2019

To disclose

29 days

Affected

Not disclosed

Linked

6 filings

Confidence

65%
Full breach record for The National Wildlife Federation →2 incidents on file

National Wildlife Federation notified customers that a third-party vendor's database containing Ranger Rick Zoobooks payment data was accessed without authorization on Jan 3, 2019. The breach was discovered on Apr 25, 2019. Affected data includes names, addresses, credit/debit card numbers, expiration dates, and CVVs. The organization engaged investigators, secured the website, and is working with the vendor on additional safeguards.

Incident timeline

undetected · 112 days
discovery → filing · 29 days

Jan 3, 2019

Begins

Apr 25, 2019

Discovered

May 24, 2019

Filed

vs. sector median

2 wks faster

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓

Filing propagation · 6 filings · 6 states

View merged incident ↗
Washington State AGMay 24 · first
Montana State AGMay 24 · first
Massachusetts State AGMay 24 · first
Oregon State AGMay 24 · first
New Hampshire State AGMay 24 · first
California State AGMay 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.