UnknownMedium
KandyPens, Inc.
bd_979fa051fb8fb42e · schema v1 · pii pii-v1
Full breach record for KandyPens, Inc. →KandyPens, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2020-04-20. The breach occurred during 3/7/2019 - 2/13/2020. The breach was discovered on 2/12/2020. 39,457 individuals were affected. Notice was sent on 4/20/2020.
Oregon clock✗ OR AG >45d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_25e5d4335dc9bc38California State AGfiled 2020-04-20Verified
- bd_bf8f69e6defa73e2Montana State AGfiled 2020-04-20Verified by operator
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 20, 2020
- Raw hash
- 49dea800a0a57ebbc0464fb64bcf94aded78bac701e196560a06ed9d64c2541b
Reporting entity
- Name
- KandyPens, Inc.norm: kandypens
Victim entity
- Name
- KandyPens, Inc.norm: kandypens
Incident
- Discovered
- Feb 12, 2020
- Materiality determined
- —
- Notification sent
- Apr 20, 2020
- Affected individuals
- 39,457
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- OR AG >45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.