HackingVulnerability ExploitData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Darwin's Natural Pet Products
bd_43093f35ec7b99cf · schema v1 · pii pii-v1
Full breach record for Darwin's Natural Pet Products →Darwin’s Natural Pet Products disclosed a data event affecting 3,386 California residents. Unauthorized access to customer credit/debit card data (name, card number, CVV) occurred between Sept 27, 2016, and March 16, 2019. The breach was discovered on March 8, 2019, following a forensic investigation. Notification letters were mailed starting June 7, 2019.
California clockDiscovered Mar 8, 2019 → Notified Jun 7, 201991d ✗ CA 60-day late13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_311d48127ca3705aWashington State AGfiled 2019-06-07Candidate
- bd_ac1136b87b85da50Oregon State AGfiled 2019-06-07Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147945
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2019
- Raw hash
- cd33fa6e1b0ecd41e04262c4fc3e54edb947d298f207e5405759204c644dcae0
Reporting entity
- Name
- Darwin's Natural Pet Productsnorm: darwin s natural pet products
Victim entity
- Name
- Darwin's Natural Pet Productsnorm: darwin s natural pet products
Incident
- Discovered
- Mar 8, 2019
- Materiality determined
- —
- Notification sent
- Jun 7, 2019
- Affected individuals
- 3,386
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notifying other state regulators, as required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- CA 60-day late · 91d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 8, 2019→ Notified: Jun 7, 201991d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.