HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Special Buys Clothing Inc.
bd_d39d671c575ae478 · schema v1 · pii pii-v1
Full breach record for Special Buys Clothing Inc. →Special Buys Clothing Inc. (DBA Bargain Balloons) disclosed a data breach affecting its website, BargainBalloons.com, between September 27 and November 7, 2022. An unauthorized outsider inserted malicious code onto the checkout page to skim customer information, including names, addresses, and credit card details. The company engaged forensic IT experts, secured the site, and notified law enforcement and privacy commissioners. Affected customers were offered 12 months of credit monitoring.
California clockDiscovered Oct 1, 2022 → Notified Dec 15, 202275d ✗ CA 60-day late10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_92d668249e35cf79Maine State AGfiled 2022-12-09Candidate
- bd_d002a3fd6a695621New Hampshire State AGfiled 2022-12-12(3d gap)Candidate
- bd_7f2e9177a73a8535Montana State AGfiled 2022-12-13(4d gap)Verified
- bd_e92b589788940062California State AGfiled 2023-01-19(41d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 52d gap
- bd_47ae83101c7c238cMaine State AGfiled 2023-01-20(42d gap)Verified
- bd_b7879b167a37cbd0New Hampshire State AGfiled 2023-01-30(52d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-559898
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 9, 2022
- Raw hash
- 1ca118f1bc3cf60f086fa717fef453c2a0c1d64ca605ad715ea468928db199ec
Reporting entity
- Name
- Special Buys Clothing Inc.norm: special buys clothing
- Domain
- bargainballoons.com
Victim entity
- Name
- Special Buys Clothing Inc.norm: special buys clothing
- Domain
- bargainballoons.com
Incident
- Discovered
- Oct 1, 2022
- Materiality determined
- —
- Notification sent
- Dec 15, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- notified applicable privacy commissioners, payment gateways and local police of this incident
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- CA 60-day late · 75d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 1, 2022→ Notified: Dec 15, 202275d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.