HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Clif Family Winery
bd_cfe1e6158b4870be · schema v1 · pii pii-v1
Full breach record for Clif Family Winery →Clif Bar Family Winery & Farm, LLC reported a data security incident involving its third-party ecommerce provider, Missing Link Networks, Inc. (MLN). The breach affected payment card transactions from April 1-30, 2015, potentially exposing names, payment card numbers, addresses, and dates of birth. MLN notified the winery on May 27, 2015, fixed the breach, and notified law enforcement and card networks. Consumer notification letters were sent on June 10, 2015.
California clockDiscovered May 27, 2015 → Notified Jun 10, 201514d ✓ CA 60-day OK14 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-56310
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 10, 2015
- Raw hash
- a0d6f2b78bade1bd44b0103b14bc0ea141af0d41957394a2e5e450957a0d1874
Reporting entity
- Name
- Clif Barnorm: clif bar
- Domain
- clifbar.com
Victim entity
- Name
- Clif Family Winerynorm: clif family winery
- Domain
- cliffamily.com
Incident
- Discovered
- May 27, 2015
- Materiality determined
- —
- Notification sent
- Jun 10, 2015
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- MLN has notified American Express, MasterCard and Visa
- Third party
- via Missing Link Networks, Inc.
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 14d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 27, 2015→ Notified: Jun 10, 201514d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.