MalwareRansomwareData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTPIILowContained
Audio Advisor, Inc.
bd_cfab372bd4837290 · schema v1 · pii pii-v1
Full breach record for Audio Advisor, Inc. →Audio Advisor, Inc. disclosed a data breach involving its third-party payment processor, Freestyle Solutions. Malware was identified on Freestyle servers hosting Audio Advisor's e-commerce site between September 18, 2020, and February 3, 2022. The malware collected payment card information (cardholder name, number, CVV, expiration date). No SSNs or other personal identifiers were impacted. Freestyle engaged forensic experts, removed the malware, and notified law enforcement. Audio Advisor issued breach notifications to affected customers in September 2022.
California clockDiscovered Feb 3, 2022 → Notified Sep 16, 2022225d ✗ CA 60-day late32 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557335
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2022
- Raw hash
- 3d44c2bbad447028958006307e385a3a6d52be76d6442c526ca685831e8386b1
Reporting entity
- Name
- Audio Advisor, Inc.norm: audio advisor
- Domain
- audioadvisor.com
Victim entity
- Name
- Audio Advisor, Inc.norm: audio advisor
- Domain
- audioadvisor.com
Incident
- Discovered
- Feb 3, 2022
- Materiality determined
- —
- Notification sent
- Sep 16, 2022
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement authorities
- Third party
- via Freestyle Solutions
- Initial access
- supply_chain
Compliance
- Time to disclose
- 32 weeks(225 days from discovery to filing)
- Compliance flags
- CA 60-day late · 225d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 3, 2022→ Notified: Sep 16, 2022225d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.