HackingTechnologyRetail & ConsumerInformationStolen CredentialsCustomer Data InvolvedCredentialsIdentity (basic)LocationLowContained

Disney Consumer Products and Interactive Media (DCPI)

bd_9d6215c9032297f5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 12, 2016

Filed

Jul 30, 2016

To disclose

18 days

Affected

Not disclosed

Confidence

64%

Full breach record for Disney Consumer Products and Interactive Media (DCPI) →

Disney Consumer Products and Interactive Media (DCPI) disclosed that an unauthorized party gained access to the playdomforums.com servers between July 9 and July 12, 2016. The breach exposed usernames, email addresses, passwords, and IP addresses. DCPI shut down the forum, invalidated passwords, and reported the incident to law enforcement. No financial or SSN data was involved.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 12, 2016 → Notified Jul 29, 201617d ✓ CA 60-day OK18 days discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 18 days

Jul 9, 2016

Begins

Jul 12, 2016

Discovered

Jul 30, 2016

Filed

vs. sector median

16 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Disney Consumer Products and Interactive Media (DCPI)
norm: disney consumer products and interactive media dcpi

Name: Disney Consumer Products and Interactive Media (DCPI)
norm: disney consumer products and interactive media dcpi
Industry: TechnologyllmRetail & Consumerllm

Discovered: Jul 12, 2016
Breach occurred: Jul 9, 2016 – Jul 12, 2016
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 29, 2016
Affected individuals: Not disclosed
Data types: CredentialsIdentity (basic)Location
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to law enforcement authorities

During the incident: Shut down the playdomforums.com website
Invalidated all user passwords for the affected accounts
Reported the incident to law enforcement authorities and are cooperating with them
Launched new forums with enhanced security measures
Changes made: Launched new forums with enhanced security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: CA 60-day OK · 17d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 12, 2016
→ Notified: Jul 29, 2016
17d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 12, 2016 → Notified: Jul 29, 2016	17d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-63132
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2016
Raw hash: 24096c35a9308e13bf7537dcb08ea0b8aaa072ff52bb01ebf1762755fe5b6458

Reporting entityDisney Consumer Products and Interactive Media (DCPI)

Victim entityDisney Consumer Products and Interactive Media (DCPI)

Incidentdiscovered Jul 12, 2016

Stated responseShut down the playdomforums.com website

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov