HackingRetail & ConsumerRetailVulnerability ExploitCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsCredentialsLowContained

Backcountry Edge, Inc.

bd_911b3c5ff0a6de87 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 3, 2019

Filed

Jul 2, 2019

To disclose

29 days

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Backcountry Edge, Inc. →2 incidents on file

Backcountry Edge, Inc. confirmed on June 3, 2019, that a sophisticated cyberattack on its website resulted in unauthorized access to customer personal information, including names, billing/shipping addresses, credit/debit card numbers, security codes, and website credentials. The company offered 12 months of complimentary credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 3, 2019 → Notified Jul 2, 201929d ✓ CA 60-day OK29 days discovery → filing

Incident timeline

discovery → filing · 29 days

Jun 3, 2019

Discovered

Jul 2, 2019

Filed

vs. sector median

5 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_176660ca3ea77fc82019-07-02Verified
Washington State AGbd_54eeaff5ff3f3bdf2019-07-02Verified
New Hampshire State AGbd_cf01d34910f199c52019-07-02Verified
Montana State AGbd_16214674cb5fd42d2019-06-27 · +5dCandidate

Name: Backcountry Edge, Inc.
norm: backcountry edge
Domain: backcountryedge.com

Name: Backcountry Edge, Inc.
norm: backcountry edge
Domain: backcountryedge.com
Industry: Retail & Consumerllm

Discovered: Jun 3, 2019
Materiality determined: —
Notification sent: Jul 2, 2019
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentialsCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Confirmed that a sophisticated cyberattack on our website may have resulted in the unauthorized access of your personal information by hackers
Providing you with access to an online credit monitoring service (myTrueIdentity) for twelve (12) months at no charge through TransUnion Interactive
Changes made: Recommend that you promptly change your online password(s) and security question(s)/answer(s)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: CA 60-day OK · 29d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 3, 2019
→ Notified: Jul 2, 2019
29d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 3, 2019 → Notified: Jul 2, 2019	29d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJun 27 · first

Oregon State AG+5d

Washington State AG+5d

New Hampshire State AG+5d

California State AG+5d · this page

Pattern: first filing Jun 27 (MT), last Jul 2 (CA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-148602
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 2, 2019
Raw hash: b4c5182da7894356743f8cd693e6cd91ad8fa149415d15e029650c8459d57de9

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBackcountry Edge, Inc.

Victim entityBackcountry Edge, Inc.

Incidentdiscovered Jun 3, 2019

Stated responseConfirmed that a sophisticated cyberattack on our website may have resulted in the unauthorized access of your personal information by hackers

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov