HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICCREDENTIALSLowContained
LiveAuctioneers, LLC
bd_8aa67654e7ea59fa · schema v1 · pii pii-v1
Full breach record for LiveAuctioneers, LLC →LiveAuctioneers, LLC disclosed a data breach affecting bidder accounts following a cyber attack on an IT supplier on June 19, 2020. The incident exposed names, emails, addresses, phone numbers, visit history, and decrypted passwords. Notification was sent on July 11, 2020. LiveAuctioneers contained the breach, suspended the supplier, reset credentials, and implemented MFA and stronger encryption.
California clockDiscovered Jul 11, 2020 → Notified Jul 11, 20200d ✓ CA 60-day OK9 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f63d1377b0db81bcOregon State AGfiled 2020-09-10Verified
- bd_809efe72a351c5d6Delaware State AGfiled 2020-07-11(61d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-193927
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2020
- Raw hash
- 394fbab9add388b0ea45a6ab5678038e233e344a9adf58556ee3a896423cb693
Reporting entity
- Name
- LiveAuctioneers, LLCnorm: liveauctioneers
- Domain
- liveauctioneers.com
Victim entity
- Name
- LiveAuctioneers, LLCnorm: liveauctioneers
- Domain
- liveauctioneers.com
Incident
- Discovered
- Jul 11, 2020
- Materiality determined
- —
- Notification sent
- Jul 11, 2020
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICCREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- working with government authorities to bring the perpetrators to justice
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 11, 2020→ Notified: Jul 11, 20200d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.