HackingRetail & ConsumerRetailStolen CredentialsTargetedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsMediumContained

BEL USA LLC

bd_8a9e81f6ae071ab9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 16, 2018

Filed

Jan 4, 2019

To disclose

7 weeks

Affected

1,188state residents only

Linked

6 filings

Confidence

64%

Full breach record for BEL USA LLC →2 incidents on file

Bel USA, LLC disclosed that unauthorized code was inserted into its DiscountMugs.com shopping cart between August 5 and November 16, 2018, collecting customer PII and payment card data (including CVV2). The company discovered the incident on November 16, 2018, removed the code, engaged forensic investigators, and notified law enforcement. Affected individuals were offered 12 months of identity protection.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 103 days

discovery → filing · 7 weeks / 49 days

Aug 5, 2018

Begins

Nov 16, 2018

Discovered

Jan 4, 2019

Filed

vs. sector median

1 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_2fe11865ef1e51412018-12-31 · +4dVerified by operator
California State AGbd_1b22d8ec0a32e0f42018-12-26 · +9dVerified
Massachusetts State AGbd_2afd0bbcfb7e9d6d2018-12-26 · +9dVerified
New Hampshire State AGbd_421570bfefefba372018-12-26 · +9dVerified

Show 1 more filing ↓up to 9d gap

Washington State AGbd_ccae1af0c49f26e92018-12-26 · +9dCandidate

Name: BEL USA LLC
norm: bel usa

Name: BEL USA LLC
norm: bel usa
Industry: Retail & Consumerllm

Discovered: Nov 16, 2018
Breach occurred: Aug 5, 2018 – Nov 16, 2018
Undetected for: 103 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,188state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the matter to law enforcementWorking with law enforcement and the payment card companies in their investigations
Initial access: exploit_public_facing

During the incident: Initiated an investigation
Removed the unauthorized code
Reported the matter to law enforcement and to the payment card companies
Retained a leading computer security firm
Took steps to strengthen our website’s security
Working with law enforcement and the payment card companies in their investigations
Changes made: Removed the unauthorized code from our website
Took steps to strengthen our website’s security
Arranged to have AllClear ID protect your identity for 12 months at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

California State AGDec 26 · first

Massachusetts State AGDec 26 · first

New Hampshire State AGDec 26 · first

Washington State AGDec 26 · first

Montana State AG+5d

South Carolina State AG+9d · this page

Pattern: first filing Dec 26 (CA), last Jan 4 (SC) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2019/BelUSA.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 4, 2019
Raw hash: 383943b8c21851b21b88042cfbc448ed3e91216e06e0889ec6355fb89579c4f9

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityBEL USA LLC

Victim entityBEL USA LLC

Incidentdiscovered Nov 16, 2018

Stated responseInitiated an investigation

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov