HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountFinancial credentialsLowContained

1873349 Ontario, Inc.

bd_b9636a23de596e19 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 30, 2018

Filed

Nov 30, 2018

To disclose

4 weeks

Affected

540state residents only

Confidence

71%

1873349 Ontario, Inc. notified the Washington AG of a security incident affecting 540 Washington residents. Unauthorized access to payment card data occurred between August 15, 2014, and September 15, 2018. The breach was discovered on October 30, 2018, and notifications were mailed on November 30, 2018. Data exposed included names, card numbers, expiration dates, and CVVs.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1537 days

discovery → filing · 4 weeks / 31 days

Aug 15, 2014

Begins

Oct 30, 2018

Discovered

Nov 30, 2018

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed540 affectedView incident

Name: 1873349 Ontario, Inc.
norm: 1873349 ontario

Name: 1873349 Ontario, Inc.
norm: 1873349 ontario
Industry: Retail & Consumerllm

Discovered: Oct 30, 2018
Breach occurred: Aug 15, 2014 – Sep 15, 2018
Undetected for: 1,537 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 30, 2018
Affected individuals: 540state-resident count only
Data types: PIIIdentity (basic)Financial accountFinancial credentials
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 500+dexposure 500+d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General Consumer Protection Division
Initial access: exploit_public_facing

During the incident: Began an investigation with the assistance of a leading computer security firm
Disabled the website
Changes made: Redesigned its website
Implemented additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10558.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2018
Raw hash: f6bd333f479a92f723144b758f4d75b21125f3abeb301bc410efa48d033cee9c

Reporting entity1873349 Ontario, Inc.

Victim entity1873349 Ontario, Inc.

Incidentdiscovered Oct 30, 2018

Stated responseBegan an investigation with the assistance of a leading computer security firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com