HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryCREDENTIALSIDENTITY_BASICCriticalContained
Armor Games Inc.
bd_8327e2094108f802 · schema v1 · pii pii-v1
Full breach record for Armor Games Inc. →Armor Games Inc. disclosed a data security incident involving the unauthorized access of user emails and hashed passwords, originally discovered on October 24, 2014. In October 2017, the company was informed of a file containing 11 million emails and plaintext passwords allegedly sourced from Armor Games and Coupon Mom. While investigating the source, Armor Games treated this as a breach, requiring password changes and implementing new security policies. No financial information or names were involved.
California clockDiscovered Oct 24, 2014 → Notified Oct 24, 20171096d ✗ CA 60-day late37 months discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11,000,000 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-112355
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2017
- Raw hash
- b95b60a3238ccce2363c9db738bbdefb55956f756a1be05445f3af91522df61e
Reporting entity
- Name
- Armor Games Inc.norm: armor games
- Domain
- armorgames.com
Victim entity
- Name
- Armor Games Inc.norm: armor games
- Domain
- armorgames.com
Incident
- Discovered
- Oct 24, 2014
- Materiality determined
- —
- Notification sent
- Oct 24, 2017
- Affected individuals
- 11,000,000
- Data types
- CREDENTIALSIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 37 months(1124 days from discovery to filing)
- Compliance flags
- CA 60-day late · 1096d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 24, 2014→ Notified: Oct 24, 20171096d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.