MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedFinancial accountIdentity (basic)PIILowContained

Pro Wrestling Tees

bd_60fc5cdc5a404bd7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2021

Filed

Dec 22, 2021

To disclose

7 weeks

Affected

581state residents only

Linked

7 filings

Confidence

69%

Full breach record for Pro Wrestling Tees →

Pro Wrestling Tees notified Washington AG of a malware incident affecting customer credit card data. Discovered Nov 1, 2021, after law enforcement contact. 581 Washington residents affected. Malware removed via forensic vendor; enhanced security measures implemented. Identity theft protection offered.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 214 days

discovery → filing · 7 weeks / 51 days

Apr 1, 2021

Begins

Nov 1, 2021

Discovered

Dec 22, 2021

Filed

vs. sector median

on median

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_338929cf5b2d647e2021-12-22Candidate
California State AGbd_a630d66aefdcbafa2021-12-22Verified
Oregon State AGbd_e7d2ab60469b7dd32021-12-22Verified
Massachusetts State AGbd_f2b55a72235fff3e2021-12-22Verified

Show 2 more filings ↓up to 7d gap

Montana State AGbd_a0cd43353e8f28a02021-12-23 · +1dVerified by operator
Indiana State AGbd_980b006784dc4c5b2021-12-15 · +7dVerified

Name: Pro Wrestling Tees
norm: pro wrestling tees

Name: Pro Wrestling Tees
norm: pro wrestling tees
Industry: Retail & Consumerllm

Discovered: Nov 1, 2021
Breach occurred: Apr 1, 2021 – Nov 1, 2021
Undetected for: 214 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 15, 2021
Affected individuals: 581state-resident count only
Data types: PIIFinancial account
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 200-299dexposure 200-299d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: informed by law enforcement

During the incident: Conducted an extensive investigation of our system
Working with a sophisticated forensic vendor, we have removed the malware virus from our system
Secured our system
Reviewed our internal data management and protocols
Implemented enhanced security measures
Offering identity theft protection services through IDX
Changes made: Implemented enhanced security measures to help prevent this type of incident from recurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGDec 15 · first

Maine State AG+7d

California State AG+7d

Oregon State AG+7d

Massachusetts State AG+7d

Washington State AG+7d · this page

Montana State AG+8d

Pattern: first filing Dec 15 (IN), last Dec 23 (MT) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA5228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2021
Raw hash: a758329a90de01a99177c192eec533167801aeaf84cea9fe1fbed4330d5f42bd

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityPro Wrestling Tees

Victim entityPro Wrestling Tees

Incidentdiscovered Nov 1, 2021

Stated responseConducted an extensive investigation of our system

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com