HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Regency Cinemas
bd_53081f95ccf325e7 · schema v1 · pii pii-v1
Full breach record for Regency Cinemas →Regency Theatres notified California AG in June 2018 regarding a January 2018 breach of its ticketing website (www.regencymovies.com). An unauthorized third party exploited a vulnerability to access customer account data, including names, addresses, emails, encrypted passwords, and rewards card numbers. Regency identified and patched the vulnerability, engaged security experts, and provided 12 months of free identity protection services to affected customers.
California clockDiscovered Jun 1, 2018 → Notified Jun 18, 201817d ✓ CA 60-day OK18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-137238
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 19, 2018
- Raw hash
- c7742d5335a2234cc7a51244003a00d5fa24a5c6fc59d88393ab2dea02d0c011
Reporting entity
- Name
- Regency Cinemasnorm: regency cinemas
- Domain
- regencycinemas.com
Victim entity
- Name
- Regency Cinemasnorm: regency cinemas
- Domain
- regencycinemas.com
Incident
- Discovered
- Jun 1, 2018
- Materiality determined
- Jun 18, 2018
- Notification sent
- Jun 18, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 1, 2018→ Notified: Jun 18, 201817d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.