HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Sarku Japan

bd_3e7e01e462f64ab0 · schema v1 · pii pii-v1

SAR Holdings Inc. d/b/a Sarku Japan disclosed a data breach occurring between January 13, 2022, and February 6, 2022. An unauthorized actor accessed systems containing customers' names, addresses, dates of birth, and Social Security numbers. Sarku Japan offered 12 months of complimentary identity monitoring through Kroll to affected individuals.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

bd_154978068a8580a4Washington State AGfiled 2022-03-16Candidate
bd_676946af941027baMaine State AGfiled 2022-03-16Verified
bd_6f1f4c9b26bfab19Oregon State AGfiled 2022-03-16Verified
bd_2e9e3b153a51c8a6California State AGfiled 2022-08-08(145d gap)Verified

Show 1 more filing ↓up to 145d gap

bd_e82af6a75bb3e3f1Maine State AGfiled 2022-08-08(145d gap)Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-551740
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 16, 2022
Raw hash: d1e42f9147135b1d034bc2d8a1713181f5677db2c3aa60c7824f970e8418daea

Reporting entity

Name: SAR HOLDINGS, INC.
norm: sar holdings

Victim entity

Name: Sarku Japan
norm: sarku japan
Domain: sarkujapan.com

Incident

Discovered: Feb 6, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

Compliance

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.