DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

Hi-Tec Sports USA, Inc.

bd_7a8b8a86df040fe0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 11, 2016

Filed

May 11, 2016

To disclose

9 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%
Full breach record for Hi-Tec Sports USA, Inc. →2 incidents on file

Hi-Tec Sports USA, Inc. disclosed a data breach affecting customers who placed online orders between September 22, 2014, and March 11, 2016. Unauthorized code inserted into the order completion page collected payment card numbers, expiration dates, security codes (CVV), names, addresses, email addresses, and phone numbers before encryption. The incident was discovered on March 11, 2016, when customers reported fraudulent charges. Hi-Tec engaged a security firm, removed the malicious code, and developed a new e-commerce website.

Incident timeline

undetected · 536 days
discovery → filing · 9 weeks / 61 days

Sep 22, 2014

Begins

Mar 11, 2016

Discovered

May 11, 2016

Filed

vs. sector median

+1 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
New Hampshire State AGMay 11 · first
Oregon State AGMay 11 · first
California State AGMay 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.