HackingRetail & ConsumerRetailVulnerability ExploitTargetedData ExfiltratedIdentity (basic)Financial accountLowContained

JB Autosports, Inc.

bd_7fbec39ca86c1a5e · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 19, 2016

To disclose

—

Affected

44state residents only

Linked

5 filings

Confidence

65%

Full breach record for JB Autosports, Inc. →

JB Autosports, Inc. notified customers of a cyberattack on its websites (subispeed.com, ft86speedfactory.com) from Aug 1 to Nov 9, 2015. Attackers intercepted customer names, addresses, and full credit card details (numbers, expirations, CVV) via the checkout page. The company engaged third-party vendors for investigation and implemented live monitoring security services.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 1, 2015

Begins

Jan 19, 2016

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_6609b1ee5405642f2016-01-19Verified
Montana State AGbd_264b378e4c0e3e1c2016-01-13 · +6dCandidate
California State AGbd_cea101dfa6a03bb62016-01-12 · +7dVerified
Oregon State AGbd_802114c6f12f7a212016-03-02 · +43dVerified

Name: JB Autosports, Inc.
norm: jb autosports

Name: JB Autosports, Inc.
norm: jb autosports
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Aug 1, 2015 – Nov 9, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 44state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Contracting with a third-party vendor to identify the source of the breach and implement security solutions
Improved its cybersecurity defenses
Had major credit card networks and PayPal notified of the breach
Changes made: Newly implemented live monitoring security services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJan 12 · first

Montana State AG+1d

Massachusetts State AG+7d

South Carolina State AG+7d · this page

Oregon State AG+50d

Pattern: first filing Jan 12 (CA), last Mar 2 (OR) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2016/JBAutosports%2CInc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2016
Raw hash: a449597c15608fa4ff5c104df045eb397c65ebc4c4c96bb805ab04d9de4d7193

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJB Autosports, Inc.

Victim entityJB Autosports, Inc.

IncidentUnauthorized Access

Stated responseContracting with a third-party vendor to identify the source of the breach and implement security solutions

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov