HackingCustomer Data InvolvedIDENTITY_BASICCREDENTIALSFINANCIAL_ACCOUNTLowContained
Bulk Reef Supply
bd_83c1f7e39a6d6af8 · schema v1 · pii pii-v1
Full breach record for Bulk Reef Supply →Bulk Reef Supply experienced an unauthorized access incident affecting customer data from July 30, 2014, to January 30, 2015. The intrusion was discovered on January 21, 2015. Affected data included names, addresses, phone numbers, email addresses, usernames, passwords, and credit card information. The company engaged forensic experts, contained the breach, and offered one year of Experian ProtectMyID Alert to affected customers.
California clockDiscovered Jan 21, 2015 → Notified Feb 17, 201527d ✓ CA 60-day OK5 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-48537
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2015
- Raw hash
- 5743825e225b35a86195fd398b3984392702d3a93db0b2b5134ed4c8285bc67a
Reporting entity
- Name
- Bulk Reef Supplynorm: bulk reef supply
- Domain
- bulkreefsupply.com
Victim entity
- Name
- Bulk Reef Supplynorm: bulk reef supply
- Domain
- bulkreefsupply.com
Incident
- Discovered
- Jan 21, 2015
- Materiality determined
- —
- Notification sent
- Feb 17, 2015
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALSFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 27d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 21, 2015→ Notified: Feb 17, 201527d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.