Zum by Indigo wild Official Shop
bd_8c049d25fb0f53bc · schema v1 · pii pii-v1
Full breach record for Zum by Indigo wild Official Shop →Indigo Wild, an online retailer, disclosed a data breach affecting customers who made purchases between November 14, 2016, and April 17, 2017. Malicious code inserted into the company's website by cybercriminals may have stolen personal information, including names, email addresses, billing addresses, telephone numbers, and payment card details (number, security code, expiration date). The breach was discovered on April 17, 2017. Indigo Wild remediated the vulnerability, notified payment card networks, and engaged law enforcement. Affected individuals were notified via mail, with specific resident counts provided for Rhode Island (111), Connecticut (330), and others. No specific count of total affected individuals was disclosed.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-68843
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 15, 2017
- Raw hash
- ec2401df9594b940e34d5bfa7804255708782ebf08206fddb274a2a07a30b3e4
Reporting entity
- Name
- Zum by Indigo wild Official Shopnorm: zum by indigo wild official shop
- Domain
- inidigawild.com
Victim entity
- Name
- Zum by Indigo wild Official Shopnorm: zum by indigo wild official shop
- Domain
- inidigawild.com
Incident
- Discovered
- Apr 17, 2017
- Materiality determined
- —
- Notification sent
- May 12, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 17, 2017→ Notified: May 12, 201725d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.