HackingTechnologyRetail & ConsumerInformationStolen CredentialsCustomer Data InvolvedTargetedPIIFinancial accountIdentity (basic)MediumActive

ADOBE INC.

bd_b95c528ad4a58073 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 9, 2013

To disclose

—

Affected

9,439state residents only

Linked

3 filings

Confidence

66%

Full breach record for ADOBE INC. →3 incidents on file

Adobe Systems reported unauthorized access to customer order information between Sept 11-17, 2013. Attackers accessed names, encrypted card numbers, and expiration dates, and decrypted some cards. 9,439 Hawaii residents were notified starting Oct 8, 2013. Adobe engaged the FBI and Experian for credit monitoring.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Sep 11, 2013

Begins

Oct 9, 2013

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_cd8eb7536d0b35642013-10-03 · +6dCandidate
Massachusetts State AGbd_16e0c3c4c91fad042013-10-02 · +7dVerified

Name: ADOBE INC.
norm: adobe

Name: ADOBE INC.
norm: adobe
Industry: TechnologyllmRetail & Consumerllm

Discovered: —
Breach occurred: Sep 11, 2013 – Sep 17, 2013
Materiality determined: —
Notification sent: Oct 8, 2013
Affected individuals: 9,439state-resident count only
Data types: PIIFinancial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Hawaii Office of Consumer Protection
Initial access: valid_credentials

During the incident: Contacted the Federal Bureau of Investigation
Contacted the banks processing payments for Adobe
Engaged Experian to provide complimentary one-year credit monitoring membership
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HI CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGOct 2 · first

California State AG+1d

Hawaii State AG+7d · this page

Pattern: first filing Oct 2 (MA), last Oct 9 (HI) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2015/12/OCP-2013-0653.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2013
Raw hash: 928ca97d44cae6a915054cbfb2759fdf1f2c86f9fb2ca9cf49944240cd4d8ea9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityADOBE INC.

Victim entityADOBE INC.

IncidentUnauthorized Access

Stated responseContacted the Federal Bureau of Investigation

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org