HackingTechnologyTelecom & MediaInformationCustomer Data InvolvedIdentity (basic)CredentialsLowResolved

CBS INTERACTIVE INC.

bd_4e209357d1be0888 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 21, 2018

Filed

May 24, 2018

To disclose

3 days

Affected

Not disclosed

Confidence

64%

Full breach record for CBS INTERACTIVE INC. →

CBS Interactive, Inc. notified the California Attorney General of a security incident affecting TVShowsonDVD.com. An unauthorized party accessed user registration information, including names, usernames, passwords, and dates of birth, between January 1, 2018, and May 16, 2018. The company discovered the incident on May 21, 2018, and subsequently took the website permanently offline. No specific count of affected individuals was disclosed.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 21, 2018 → Notified May 24, 20183d ✓ CA 60-day OK3 days discovery → filing

Incident timeline

undetected · 140 days

discovery → filing · 3 days

Jan 1, 2018

Begins

May 21, 2018

Discovered

May 24, 2018

Filed

vs. sector median

18 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CBS INTERACTIVE INC.
norm: cbs interactive

Name: CBS INTERACTIVE INC.
norm: cbs interactive
Domain: tvshowsondvd.com
Industry: TechnologyllmTelecom & Mediallm

Discovered: May 21, 2018
Breach occurred: Jan 1, 2018 – May 16, 2018
Undetected for: 140 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 24, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Credentials
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation
Decided to take the site permanently offline
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 3 days(3 days from discovery to filing)
Compliance flags: CA 60-day OK · 3d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 21, 2018
→ Notified: May 24, 2018
3d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 21, 2018 → Notified: May 24, 2018	3d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-136534
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 24, 2018
Raw hash: 67717938b48de87bc0793be1c33013ca5fb48535fff4da2972dcb38cfed0c85d

Reporting entityCBS INTERACTIVE INC.

Victim entityCBS INTERACTIVE INC.

Incidentdiscovered May 21, 2018

Stated responseLaunched an investigation

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov