HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
TradeMotion
bd_8cadac9ae90af58f · schema v1 · pii pii-v1
Full breach record for TradeMotion →TradeMotion, operating Parts.com, disclosed a data breach occurring between October 2017 and May 2018. Unauthorized actors used compromised account credentials to extract payment card information, names, addresses, and CVV codes on five occasions. TradeMotion investigated, deactivated unused accounts, reset passwords, and engaged LifeLock to provide one year of complimentary identity protection services to affected consumers.
California clockDiscovered Oct 13, 2017 → Notified Oct 13, 20170d ✓ CA 60-day OK41 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9e989badeef93617Montana State AGfiled 2018-07-25Candidate
- bd_bb5f8841d8f2c4a8Oregon State AGfiled 2018-07-25Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-138225
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2018
- Raw hash
- 9c3ed5965579b0799770f77c6afe13bbcf505a572e9e9798ea42b13091118189
Reporting entity
- Name
- TradeMotionnorm: trademotion
Victim entity
- Name
- TradeMotionnorm: trademotion
Incident
- Discovered
- Oct 13, 2017
- Materiality determined
- —
- Notification sent
- Oct 13, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 41 weeks(285 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 13, 2017→ Notified: Oct 13, 20170d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.