HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Official Catalog for CJ Export Products
bd_6ecc3110c23e2e19 · schema v1 · pii pii-v1
Full breach record for Official Catalog for CJ Export Products →CJ Products Inc. disclosed a data breach affecting pillowpets.com customers. Unauthorized access occurred between August 30, 2017, and April 9, 2018, via unauthorized code embedded in the website. Customer data at risk included names, addresses, and credit card numbers. The company engaged forensic investigators, notified law enforcement and credit bureaus, and implemented security measures.
California clockDiscovered Apr 18, 2017 → Notified Feb 15, 2019668d ✗ CA 60-day late22 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-144851
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 19, 2019
- Raw hash
- c24e9200187df9c8a1c65cbef5f7d52f1e2360ab5927c8d6c93803a3aaecf729
Reporting entity
- Name
- CJ Products Inc.norm: cj products
- Domain
- pillowpets.com
Victim entity
- Name
- Official Catalog for CJ Export Productsnorm: official catalog for cj export products
- Domain
- m.cjcatalog.co.kr
Incident
- Discovered
- Apr 18, 2017
- Materiality determined
- —
- Notification sent
- Feb 15, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- notified the applicable state agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 months(672 days from discovery to filing)
- Compliance flags
- CA 60-day late · 668d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 18, 2017→ Notified: Feb 15, 2019668d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.