DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsMediumContained

Darwin's Natural Pet Products

bd_43093f35ec7b99cf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 8, 2019

Filed

Jun 7, 2019

To disclose

13 weeks

Affected

3,386state residents only

Linked

6 filings

Confidence

66%
Full breach record for Darwin's Natural Pet Products

Darwin’s Natural Pet Products disclosed that customer credit and debit card information (name, card number, expiration date, CVV) may have been compromised via unauthorized access to its online new customer platform between September 27, 2016, and March 16, 2019. The company became aware of the incident on March 8, 2019. Approximately 3,386 California residents were affected. The company engaged a third-party forensic firm, notified law enforcement and regulators, and is implementing additional security safeguards.

Incident timeline

undetected · 892 days
discovery → filing · 13 weeks / 91 days

Sep 27, 2016

Begins

Mar 8, 2019

Discovered

Jun 7, 2019

Filed

vs. sector median

+5 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 3d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGJun 7 · first
Washington State AGJun 7 · first
Oregon State AGJun 7 · first
California State AGJun 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.