HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICCREDENTIALSAUTHENTICATIONLowContained
Blink Charging
bd_89e50ccbabe1ce0f · schema v1 · pii pii-v1
Full breach record for Blink Charging →Blink Mobility notified customers on Jan 8, 2024, that a former vendor's MongoDB database had a vulnerability exploited on Oct 20, 2023, compromising phone numbers, emails, encrypted passwords, and account details. The company addressed the vulnerability, shut down legacy systems, and deleted compromised data.
California clockDiscovered Dec 14, 2023 → Notified Jan 8, 202425d ✓ CA 60-day OK28 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-579251
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 11, 2024
- Raw hash
- ea5b1454c7e7b41927a40aca4b53c36e4a28df3ef49d927182a7cd1036b08a40
Reporting entity
- Name
- Blink Chargingnorm: blink charging
- Domain
- blinkcharging.com
Victim entity
- Name
- Blink Chargingnorm: blink charging
- Domain
- blinkcharging.com
Incident
- Discovered
- Dec 14, 2023
- Materiality determined
- —
- Notification sent
- Jan 8, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALSAUTHENTICATION
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Third party
- via former vendor
- Initial access
- supply_chain
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 25d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 14, 2023→ Notified: Jan 8, 202425d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.