HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
CBD Industries, LLC
bd_7676897cc0117b01 · schema v1 · pii pii-v1
Full breach record for CBD Industries, LLC →CBD Industries, LLC reported a data breach affecting its eCommerce platform. Unauthorized access occurred between March 30 and May 18, 2020, resulting in the exfiltration of customer names, Social Security numbers, driver's license numbers, and financial account details. The company engaged law enforcement and outside legal counsel, and offered one year of complimentary identity monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_9ce793b7916c91e2Montana State AGfiled 2020-09-29Candidate
- bd_b6276c25cc19296bOregon State AGfiled 2020-09-29Verified
- bd_be79ead0dc0a32b6Washington State AGfiled 2020-09-29Verified
- bd_cfe47b89d7cd269eMaine State AGfiled 2020-09-29Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-194582
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2020
- Raw hash
- 8315abb88e45d2c1a141f0c8f0bce2c71702efa0fb0a9ea7272ecfead475bf7f
Reporting entity
- Name
- CBD Industries, LLCnorm: cbd industries
Victim entity
- Name
- CBD Industries, LLCnorm: cbd industries
Incident
- Discovered
- May 18, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(134 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.