MalwareRetail & ConsumerTechnologyRetailCapture App DataCustomer Data InvolvedData ExfiltratedPCIIDENTITY_BASICFINANCIAL_ACCOUNTLowActive
Datapak Services
bd_89f1f4964aabfd61 · schema v1 · pii pii-v1
Full breach record for Datapak Services →Datapak Services Corporation, an order fulfillment and payment processor for e-commerce websites, discovered malware placed on its systems on March 5, 2013, potentially enabling unauthorized access to customer credit card information including name, address, primary account number, expiration date, and card security code. The investigation was ongoing at time of notification. Affected individuals were offered one year of identity protection services through AllClearID.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_32d8425b7a2ea35bNew Hampshire State AGfiled 2013-11-06(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-43227
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 8, 2013
- Raw hash
- 32191957c606cfbe91b66b8af11f3c689f6902b4f004e475ac406c61e20dd742
Reporting entity
- Name
- Datapak Servicesnorm: datapak services
- Domain
- datapakservices.com
Victim entity
- Name
- Datapak Servicesnorm: datapak services
- Domain
- datapakservices.com
- Industry
- Retail & ConsumerllmTechnologyllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Nov 11, 2013
- Affected individuals
- Not disclosed
- Data types
- PCIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1059 Command and Scripting InterpreterT1005 Data from Local System
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified California Attorney General per SB 24
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.