HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
North 40 Outfitters
bd_9ecd23c311d8518a · schema v1 · pii pii-v1
Full breach record for North 40 Outfitters →North 40 Outfitters reported a data breach affecting its e-commerce website. Between January 20, 2017, and January 29, 2018, unauthorized access to customer credit/debit card numbers, CVVs, and account credentials occurred. The incident affected 864 California residents. North 40 notified affected individuals and credit card companies, implemented additional safeguards, and provided identity theft guidance.
California clockDiscovered Jan 29, 2018 → Notified Feb 23, 201825d ✓ CA 60-day OK25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-134036
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2018
- Raw hash
- ed3f68f3d582045ee48960bccd86b7ec12def92c943278f6f7caa9affdbc5d5f
Reporting entity
- Name
- North 40 Outfittersnorm: north 40 outfitters
Victim entity
- Name
- North 40 Outfittersnorm: north 40 outfitters
Incident
- Discovered
- Jan 29, 2018
- Materiality determined
- —
- Notification sent
- Feb 23, 2018
- Affected individuals
- 864
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to the credit card companiesproviding written notice of this incident to other state regulators as necessary
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 29, 2018→ Notified: Feb 23, 201825d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.