HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Greenworks Tools
bd_877fd6b0cfd408d7 · schema v1 · pii pii-v1
Full breach record for Greenworks Tools →Greenworks Tools experienced a cyber-attack on its e-commerce website between July 14, 2019, and June 30, 2020. Malware compromised payment card data (names, addresses, card numbers, CVVs) of customers who made purchases during this period. The company engaged forensic investigators, implemented security procedures, and notified state regulators.
California clockDiscovered Jun 3, 2020 → Notified Aug 20, 202078d ✗ CA 60-day late15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_62133428ec6bf76eMaine State AGfiled 2020-09-17Candidate
- bd_7a4ffa35717487c6Washington State AGfiled 2020-09-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-194167
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 17, 2020
- Raw hash
- 3378c2a97844964caa7d1cb38c1124dfee1ecfe286a562b4c3db4a614cfd192d
Reporting entity
- Name
- Greenworks Toolsnorm: greenworks tools
- Domain
- greenworkstools.com
Victim entity
- Name
- Greenworks Toolsnorm: greenworks tools
- Domain
- greenworkstools.com
Incident
- Discovered
- Jun 3, 2020
- Materiality determined
- —
- Notification sent
- Aug 20, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- CA 60-day late · 78d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 3, 2020→ Notified: Aug 20, 202078d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.