MalwareRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Pro Wrestling Tees

bd_a630d66aefdcbafa · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2021

Filed

Dec 22, 2021

To disclose

7 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

64%

Full breach record for Pro Wrestling Tees →

Pro Wrestling Tees notified customers of a data breach involving credit card numbers and full names. The company was informed by law enforcement on November 1, 2021, that a small portion of customer credit card numbers had been compromised. An investigation concluded that a malware virus was the source. The breach date listed on the state filing is April 1, 2021. The company removed the malware, secured systems, and offered identity theft protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 1, 2021 → Notified Dec 15, 202144d ✓ CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 214 days

discovery → filing · 7 weeks / 51 days

Apr 1, 2021

Begins

Nov 1, 2021

Discovered

Dec 22, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_338929cf5b2d647e2021-12-22Candidate
Washington State AGbd_60fc5cdc5a404bd72021-12-22Verified
Oregon State AGbd_e7d2ab60469b7dd32021-12-22Verified
Massachusetts State AGbd_f2b55a72235fff3e2021-12-22Verified

Show 2 more filings ↓up to 7d gap

Montana State AGbd_a0cd43353e8f28a02021-12-23 · +1dVerified by operator
Indiana State AGbd_980b006784dc4c5b2021-12-15 · +7dVerified

Name: Pro Wrestling Tees
norm: pro wrestling tees

Name: Pro Wrestling Tees
norm: pro wrestling tees
Industry: Retail & Consumerllm

Discovered: Nov 1, 2021
Breach occurred: Apr 1, 2021
Undetected for: 214 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 15, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Informed by law enforcement

During the incident: Conducted an extensive investigation of our system
Working with a sophisticated forensic vendor, we have removed the malware virus from our system
Secured our system
Reviewed our internal data management and protocols
Implemented enhanced security measures to help prevent this type of incident from recurring
Offering identity theft protection services through IDX
Changes made: Implemented enhanced security measures to help prevent this type of incident from recurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: CA 60-day OK · 44d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 1, 2021
→ Notified: Dec 15, 2021
44d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 1, 2021 → Notified: Dec 15, 2021	44d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGDec 15 · first

Maine State AG+7d

Washington State AG+7d

Oregon State AG+7d

Massachusetts State AG+7d

California State AG+7d · this page

Montana State AG+8d

Pattern: first filing Dec 15 (IN), last Dec 23 (MT) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-548787
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2021
Raw hash: c0056ce0715a5f09f75c62ec92390d762af2e50cdeb8f166c099dc4ffe8fd946

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityPro Wrestling Tees

Victim entityPro Wrestling Tees

Incidentdiscovered Nov 1, 2021

Stated responseConducted an extensive investigation of our system

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov