MalwareRansomwareData EncryptedFINANCIAL_ACCOUNTPCILowContained
StoneBridge Realty
bd_b4f5fedc584fdc0c · schema v1 · pii pii-v1
Full breach record for StoneBridge Realty →Stonebridge Realty Advisors, Inc. notified California AG of a security incident affecting payment card data at the Xebec restaurant. Malicious software was installed on payment processing systems between Nov 2015 and Mar 2016 to capture card info. Forensic experts were engaged, malware removed, and law enforcement notified. No SSNs involved. Count of affected individuals not specified.
California clockDiscovered May 5, 2016 → Notified May 5, 20160d ✓ CA 60-day OK≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-61691
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2016
- Raw hash
- 90dca9494764c27dfdd70c9c4f4266cbf4c66dbb7e54a2219d47c887f00343b0
Reporting entity
- Name
- StoneBridge Realtynorm: stonebridge realty
- Domain
- stonebrgrealty.com
Victim entity
- Name
- StoneBridge Realtynorm: stonebridge realty
- Domain
- stonebrgrealty.com
Incident
- Discovered
- May 5, 2016
- Materiality determined
- —
- Notification sent
- May 5, 2016
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTPCI
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Contacted law enforcement and will continue to cooperate with their ongoing investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- ≤1 day(1 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 5, 2016→ Notified: May 5, 20160d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.