MisuseTechnologyInformationData MishandlingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHealth (basic)MediumContained

Blaze Solutions

bd_65a67ff0c69a6af3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 13, 2022

To disclose

—

Affected

Not disclosed

Confidence

73%

Full breach record for Blaze Solutions →2 incidents on file

Blaze Solutions, a point-of-sale software and hosting services provider, notified affected individuals that on or about December 29, 2021, a separate business client downloaded a Foothill Wellness Center consumer list in an unauthorized manner. Exposed data included names, driver's license/government ID numbers, and medical use designations. Blaze Solutions disabled access and implemented additional security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 29, 2021

Begins

Sep 13, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Blaze Solutions
norm: blaze solutions
Domain: blazesolutions.com

Name: Blaze Solutions
norm: blaze solutions
Domain: blazesolutions.com
Industry: Technologyllm

Discovered: —
Breach occurred: Dec 29, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Insider
Threat actor: PartnerFinancial

During the incident: Disabled access to the consumer list
Implemented additional technical security measures
Offering complimentary access to credit monitoring services through IDX
Changes made: Implemented additional technical security measures
Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557152
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 13, 2022
Raw hash: 4db878b1825463f43a47080444147ad18a84b90c9efe73ec836aa7a0bb4a24d1

Reporting entityBlaze Solutions

Victim entityBlaze Solutions

IncidentInsider

Stated responseDisabled access to the consumer list

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov