DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIFinancial accountCredentialsMediumContained

Bailey's Online

bd_90242f5887072802 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 1, 2016

Filed

Mar 14, 2016

To disclose

10 weeks

Affected

2,380state residents only

Linked

3 filings

Confidence

64%
Full breach record for Bailey's Online

Bailey's Inc. disclosed a data breach affecting its online store, BaileysOnline.com. Unauthorized access occurred between December 1, 2011, and January 26, 2016. The incident involved the theft of credit card numbers, cardholder names, CVV, expiration dates, addresses, phone numbers, email addresses, and login credentials. The breach was discovered in January 2016 following a forensic examination. The company notified law enforcement, Wells Fargo Bank, and major credit card issuers.

South Carolina clock SC CRA notice due10 weeks discovery → filing
notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 1492 days
discovery → filing · 10 weeks / 73 days

Dec 1, 2011

Begins

Jan 1, 2016

Discovered

Mar 14, 2016

Filed

vs. sector median

+2 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
New Hampshire State AGMar 14 · first
South Carolina State AGMar 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.