HackingStolen CredentialsData ExfiltratedPCIFINANCIAL_ACCOUNTIDENTITY_BASICLowResolved
Sophia Institute Press
bd_918fc0a0441e94a1 · schema v1 · pii pii-v1
Full breach record for Sophia Institute Press →Sophia Institute Press reported a cyber-attack on its e-commerce websites between Nov 26, 2021 and Jul 23, 2022. Malware compromised payment card data including names, addresses, card numbers, expiration dates, and CVVs. The company engaged forensic specialists, notified card brands and processors, and informed state regulators.
California clockDiscovered Mar 17, 2022 → Notified Nov 22, 2022250d ✗ CA 60-day late39 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-559963
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2022
- Raw hash
- 73f30d6b3044e258c17580f96f0ba7dcb09bf1c2b3ada2e08d97e3fc44bd5ad7
Reporting entity
- Name
- Sophia Institute Pressnorm: sophia institute press
- Domain
- sophiainstitute.com
Victim entity
- Name
- Sophia Institute Pressnorm: sophia institute press
- Domain
- sophiainstitute.com
Incident
- Discovered
- Mar 17, 2022
- Materiality determined
- —
- Notification sent
- Nov 22, 2022
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 39 weeks(270 days from discovery to filing)
- Compliance flags
- CA 60-day late · 250d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 17, 2022→ Notified: Nov 22, 2022250d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.