HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedCustomer Data InvolvedPCIFinancial accountFinancial credentialsIdentity (basic)LowContained

JB Autosports, Inc.

bd_cea101dfa6a03bb6 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 12, 2016

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for JB Autosports, Inc. →

JB Autosports, Inc. experienced a cyberattack on its e-commerce checkout pages (subispeed.com, ft86speedfactory.com) from August 1 to November 9, 2015. Attackers intercepted customer payment data, including names, addresses, credit card numbers, and security codes, during transmission to PayPal. The company engaged third-party vendors for investigation and implemented enhanced security monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 1, 2015

Begins

Jan 12, 2016

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_264b378e4c0e3e1c2016-01-13 · +1dCandidate
Massachusetts State AGbd_6609b1ee5405642f2016-01-19 · +7dVerified
South Carolina State AGbd_7fbec39ca86c1a5e2016-01-19 · +7dVerified
Oregon State AGbd_802114c6f12f7a212016-03-02 · +50dVerified

Name: JB Autosports, Inc.
norm: jb autosports

Name: JB Autosports, Inc.
norm: jb autosports
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Aug 1, 2015 – Nov 9, 2015
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PCIFinancial accountFinancial credentialsIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Contracted with a third-party vendor to identify the source of the breach
Implemented security solutions to prevent a recurrence of the breach
Improved its cybersecurity defenses to prevent future breaches of Customer Information
Notified major credit card networks and PayPal of the breach
Changes made: Implemented live monitoring security services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJan 12 · first · this page

Montana State AG+1d

Massachusetts State AG+7d

South Carolina State AG+7d

Oregon State AG+50d

Pattern: first filing Jan 12 (CA), last Mar 2 (OR) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-59575
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 12, 2016
Raw hash: bb2fc51478ea5bec19159657a4ca13087d56834c8003452079571c9c3a650d35

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityJB Autosports, Inc.

Victim entityJB Autosports, Inc.

IncidentUnauthorized Access

Stated responseContracted with a third-party vendor to identify the source of the breach

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov