MalwareRansomwareData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedPCIFINANCIAL_ACCOUNTLowContained
Car Wash & Detailing Services
bd_8b0f5118824d247c · schema v1 · pii pii-v1
Full breach record for Car Wash & Detailing Services →Auto Pride Car Wash (Redwood City, CA) notified the California AG of a data security incident involving its third-party point-of-sale system. Between February 11 and 27, 2017, malware was placed on the POS system, compromising customer payment card data (names, card numbers, security codes). The company worked with its provider to remove the malware and offered one year of credit monitoring via Kroll.
California clockDiscovered Mar 27, 2017 → Notified Apr 4, 20178d ✓ CA 60-day OK8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-67321
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 4, 2017
- Raw hash
- ce2d540ec6301fcd7f5bae451680a7d4440f1af93cf7f782d85f65601d035415
Reporting entity
- Name
- Car Wash & Detailing Servicesnorm: car wash detailing
- Domain
- autopridecarwash.com
- Industry
- retail_consumer
Victim entity
- Name
- Car Wash & Detailing Servicesnorm: car wash detailing
- Domain
- autopridecarwash.com
- Industry
- retail_consumer
Incident
- Discovered
- Mar 27, 2017
- Materiality determined
- —
- Notification sent
- Apr 4, 2017
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Third party
- via third-party platform provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 27, 2017→ Notified: Apr 4, 20178d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.