UnknownCustomer Data InvolvedIDENTITY_BASICLowContained
Soapy Joe's Car Wash
bd_9b8dbc80b8251ca4 · schema v1 · pii pii-v1
Full breach record for Soapy Joe's Car Wash →Soapy Joe’s Car Wash reported a data security incident discovered on October 6, 2025, involving unusual activity on its corporate network. An unauthorized actor may have obtained data including names and other personal information. The company secured the network, launched an investigation, and implemented additional security measures. Affected individuals were offered complimentary identity protection services through Experian.
California clockDiscovered Oct 6, 2025 → Notified Dec 29, 202584d ✗ CA 60-day late12 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8a0758ad0ab1260aIndiana State AGfiled 2025-12-29Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-616370
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2025
- Raw hash
- 1f19f6e3fa435ed98285efb8b28b1721caa47c8acfef878482c8b7e7cf3a0fea
Reporting entity
- Name
- Soapy Joe's Car Washnorm: soapy joe s car wash
- Domain
- soapyjoescarwash.com
Victim entity
- Name
- Soapy Joe's Car Washnorm: soapy joe s car wash
- Domain
- soapyjoescarwash.com
Incident
- Discovered
- Oct 6, 2025
- Materiality determined
- —
- Notification sent
- Dec 29, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- CA 60-day late · 84d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 6, 2025→ Notified: Dec 29, 202584d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.