DisclosureLens
HackingTechnologyInformationVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

YAPSTONE, INC.

bd_7b303e874ecf74f5 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 4, 2015

Filed

Dec 18, 2015

To disclose

19 weeks

Affected

5,264state residents only

Linked

2 filings

Confidence

69%
Full breach record for YAPSTONE, INC. →2 incidents on file

Yapstone, Inc. notified the Washington Attorney General of a data breach affecting approximately 5,264 Washington residents. Unauthorized access occurred between July 15, 2014, and August 5, 2014, via a URL vulnerability. The company discovered the incident on August 4, 2015, and sent notifications on September 11, 2015. Exposed data included names, driver's license numbers, bank account numbers, and Social Security Numbers. Yapstone blocked access, retained experts, and provided 24 months of credit monitoring.

Incident timeline

undetected · 385 days
discovery → filing · 19 weeks / 136 days

Jul 15, 2014

Begins

Aug 4, 2015

Discovered

Dec 18, 2015

Filed

vs. sector median

+1 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Washington State AGDec 18 · first · this page
South Carolina State AG+38d

Pattern: first filing Dec 18 (WA), last Jan 25 (SC) — a 38-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.