HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIICREDENTIALSIDENTITY_BASICLowContained
LiveAuctioneers, LLC
bd_809efe72a351c5d6 · schema v1 · pii pii-v1
Full breach record for LiveAuctioneers, LLC →LiveAuctioneers, LLC disclosed a data breach resulting from a cyber attack on an IT supplier on June 19, 2020. The attacker accessed bidder database records including names, emails, addresses, phone numbers, visit history, and encrypted (later decrypted) passwords. Notification to consumers began July 11, 2020. LiveAuctioneers blocked access, disabled passwords, suspended the supplier, and implemented MFA and stronger encryption. No payment card numbers were accessed.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8aa67654e7ea59faCalifornia State AGfiled 2020-09-10(61d gap)Verified
- bd_f63d1377b0db81bcOregon State AGfiled 2020-09-10(61d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2020/10/Live-Auctioneers-Notice-to-Consumers.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2020
- Raw hash
- c30a1737eac45b618e7acc42e148bc9fdc8acb460b0e16064f8948b31c0580d4
Reporting entity
- Name
- LiveAuctioneers, LLCnorm: liveauctioneers
- Domain
- liveauctioneers.com
Victim entity
- Name
- LiveAuctioneers, LLCnorm: liveauctioneers
- Domain
- liveauctioneers.com
Incident
- Discovered
- Jul 11, 2020
- Materiality determined
- —
- Notification sent
- Jul 11, 2020
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALSIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- working with government authorities
- Initial access
- supply_chain
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.