HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Diode Dynamics, L.L.C
bd_52be6ca94408cf18 · schema v1 · pii pii-v1
Full breach record for Diode Dynamics, L.L.C →Diode Dynamics, L.L.C. reported a data breach affecting California residents. On or about September 26, 2020, bad actors injected malicious code into Diode Dynamics' databases by exploiting a vulnerability in its e-commerce platform. The code read and transmitted customer names, addresses, phone numbers, credit card numbers, expiration dates, and CVV codes. The malicious code was removed on October 27, 2021. Diode Dynamics implemented additional security measures and worked with credit card suppliers and law enforcement.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_7f0c873ced125234Washington State AGfiled 2021-11-16Verified
- bd_b7f5b35c28f3e2dbOregon State AGfiled 2021-11-16Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-547621
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 16, 2021
- Raw hash
- d8562f41b366729019dd48aec336b5ce240c050f506c0600f492275c1b8a515a
Reporting entity
- Name
- Diode Dynamics, L.L.Cnorm: diode dynamics
Victim entity
- Name
- Diode Dynamics, L.L.Cnorm: diode dynamics
Incident
- Discovered
- Oct 27, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.