HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Blackhawk
bd_7af468b00eff6bb2 · schema v1 · pii pii-v1
Full breach record for Blackhawk →Blackhawk Engagement Solutions notified customers of a data breach involving the MyPrepaidCenter.com website. An unauthorized party used a malicious exploit on the website between June 16 and August 19, 2023, potentially accessing profile information (name) and prepaid card details (card number, expiration date, CVV). The incident was discovered on August 12, 2023. Affected cards were blocked and reissued, and law enforcement was notified.
Leak gap clock✗ Leak >180d7 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_9b7f92797da7e73eLeak Sitecubafiled 2022-11-04(327d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-574287
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 27, 2023
- Raw hash
- 7ee1bc0e49f8ddcfa0ed73cdcc516875ef597e224f97bd2e872aad285b09801a
Reporting entity
- Name
- Blackhawknorm: blackhawk
- Domain
- blackhawk.com
Victim entity
- Name
- Blackhawknorm: blackhawk
- Domain
- blackhawk.com
Incident
- Discovered
- Aug 12, 2023
- Materiality determined
- —
- Notification sent
- Sep 27, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- Leak >180dCA 60-day OK · 46d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 12, 2023→ Notified: Sep 27, 202346d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.