MalwareCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Culligan Quench
bd_bf1ef2dc5c4c8076 · schema v1 · pii pii-v1
Full breach record for Culligan Quench →Quench USA, Inc. discovered on February 13, 2017, that its Coffee Service server was infected with a virus introduced by an unknown third party. The incident occurred on February 10, 2017. The server contained customer information including credit card numbers, expiration dates, zip codes, and addresses. Quench restored the server, launched an investigation, and is enhancing security measures. No evidence of actual misuse was found.
California clockDiscovered Feb 13, 2017 → Notified Mar 17, 201732d ✓ CA 60-day OK6 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-67200
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 29, 2017
- Raw hash
- 4ff5f1827c433378e8d45d8aa7de48d7310b391a4f2f8d72ef224da8dc8176d3
Reporting entity
- Name
- Culligan Quenchnorm: culligan quench
- Domain
- quench.culligan.com
Victim entity
- Name
- Culligan Quenchnorm: culligan quench
- Domain
- quench.culligan.com
Incident
- Discovered
- Feb 13, 2017
- Materiality determined
- —
- Notification sent
- Mar 17, 2017
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 32d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2017→ Notified: Mar 17, 201732d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.