HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
Stiletto Solutions
bd_c3302a5f6680c50d · schema v1 · pii pii-v1
Full breach record for Stiletto Solutions →STILETTO Solutions experienced a data breach affecting its e-Commerce server. Unauthorized access occurred between November 1, 2013, and September 16, 2015. The incident compromised customer payment card data (numbers, expiration dates, CVVs), billing/shipping addresses, emails, and potentially usernames/passwords. STILETTO Solutions engaged forensic investigators, revised security protocols, and migrated payment data to a third-party processor. No debit PINs were at risk.
California clockDiscovered Sep 16, 2015 → Notified Oct 23, 201537d ✓ CA 60-day OK6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-58547
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2015
- Raw hash
- 68aa56da31b39b1418fde87ed2360440199813022482ac7be83a50bec1f40a8d
Reporting entity
- Name
- Stiletto Solutionsnorm: stiletto solutions
- Domain
- stilettosolutions.com
Victim entity
- Name
- Stiletto Solutionsnorm: stiletto solutions
- Domain
- stilettosolutions.com
Incident
- Discovered
- Sep 16, 2015
- Materiality determined
- —
- Notification sent
- Oct 23, 2015
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 16, 2015→ Notified: Oct 23, 201537d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.