HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
JB Autosports, Inc.
bd_cea101dfa6a03bb6 · schema v1 · pii pii-v1
Full breach record for JB Autosports, Inc. →JB Autosports, Inc. disclosed a cybersecurity incident affecting customers who purchased products from subispeed.com and ft86speedfactory.com between August 1, 2015, and November 9, 2015. Cyberattackers originating from a Russian IP address intercepted customer names, addresses, and credit card details (including CVV/CVC/CID) during checkout transmission to PayPal. JB Autosports contracted a third-party vendor for investigation, improved cybersecurity defenses, and notified credit card networks and PayPal. No law enforcement investigation delayed the notice.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_264b378e4c0e3e1cMontana State AGfiled 2016-01-13(1d gap)Candidate
- bd_802114c6f12f7a21Oregon State AGfiled 2016-03-02(50d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-59575
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2016
- Raw hash
- bb2fc51478ea5bec19159657a4ca13087d56834c8003452079571c9c3a650d35
Reporting entity
- Name
- JB Autosports, Inc.norm: jb autosports
Victim entity
- Name
- JB Autosports, Inc.norm: jb autosports
Incident
- Discovered
- Nov 9, 2015
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.