HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
International Council of Shopping Centers
bd_6913b34ada54a1ed · schema v1 · pii pii-v1
Full breach record for International Council of Shopping Centers →The International Council of Shopping Centers (ICSC) disclosed a security incident involving unauthorized code injected into the checkout page of www.icsc.org. The malicious code was active from March 24, 2017, to August 18, 2017, potentially capturing payment card information, names, addresses, and CVVs. ICSC removed the code, engaged forensic experts, and notified payment card networks. The breach affects members and customers who entered payment data during the specified period.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-101918
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2017
- Raw hash
- c75ceb71bad7ce7bbd1cc5d8ccc5582c5856e031df5c6451f83ee03c8a91beea
Reporting entity
- Name
- International Council of Shopping Centersnorm: international council of shopping centers
- Domain
- icsc.org
Victim entity
- Name
- International Council of Shopping Centersnorm: international council of shopping centers
- Domain
- icsc.org
Incident
- Discovered
- Aug 18, 2017
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.