HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
CommerceV3
bd_45b7700712f9b85e · schema v1 · pii pii-v1
Full breach record for CommerceV3 →Creedmoor Sports, Inc. notified customers that an unauthorized party accessed CommerceV3, Inc.'s systems between Nov 24, 2021 and Dec 14, 2022. CommerceV3 informed Creedmoor on June 6, 2023, that cardholder data (name, email, billing address, payment card number, CVV, expiration date) was potentially accessed. Creedmoor offered 24 months of credit monitoring and fraud assistance.
California clockDiscovered Jun 6, 2023 → Notified Jul 21, 202345d ✓ CA 60-day OK6 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d4b9b5ed6965643eVermont State AGfiled 2023-07-21Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-570656
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2023
- Raw hash
- 6f73e09306d09c1557629101ca9781071a835ae8d5dd175a68817aacbb80f723
Reporting entity
- Name
- Creedmoor Sports, Inc.norm: creedmoor sports
Victim entity
- Name
- CommerceV3norm: commercev3
- Domain
- commercev3.com
Incident
- Discovered
- Jun 6, 2023
- Materiality determined
- —
- Notification sent
- Jul 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via CommerceV3, Inc.
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 45d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 6, 2023→ Notified: Jul 21, 202345d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.