MalwareRetail & ConsumerRetailRansomwareData ExfiltratedFinancial accountIdentity (basic)PIIMediumResolved

Value Eyecare Network

bd_d7ce869376b6ea8f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 8, 2017

Filed

Jul 21, 2017

To disclose

6 weeks

Affected

2,696state residents only

Linked

5 filings

Confidence

70%

Full breach record for Value Eyecare Network →2 incidents on file

Value Eyecare Network, Inc. d/b/a 39DollarGlasses notified Washington AG of a cyberattack on June 8, 2017, affecting 2,696 residents. Customer names, addresses, and credit/debit card info were accessed. Notifications sent July 21, 2017. Remediation included website relocation and identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 43 days

Jun 8, 2017

Discovered

Jul 21, 2017

Filed

vs. sector median

3 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_6ec8b0bf657362c22017-07-21Candidate
California State AGbd_8de2dc2d0f98bafe2017-07-21Verified
New Hampshire State AGbd_92f9bf17709847692017-07-21Verified
Oregon State AGbd_e4674e914d3749df2017-07-21Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Value Eyecare Network
norm: value eyecare network
Also named: Value Eyecare Network, Inc.dba oflegal entity
39DollarGlassesdba oftrade name
Industry: Retail & Consumerllm

Discovered: Jun 8, 2017
Materiality determined: —
Notification sent: Jul 21, 2017
Affected individuals: 2,696state-resident count only
Data types: PIIFinancial account
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General

During the incident: Commenced an investigation
Re-coding and relocating its website to a more secure web environment
Implementing additional security measures that ensure customer transactions remain secure
Offering potentially impacted customers identity theft protection services for one year, at no cost to the individual, through AllClear ID
Changes made: Relocated its website to a more secure web environment
Implemented additional security measures that ensure customer transactions remain secure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 21 · first

California State AGJul 21 · first

New Hampshire State AGJul 21 · first

Oregon State AGJul 21 · first

Washington State AGJul 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9724.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2017
Raw hash: 178f8f73bec4a3f8f5a91970971b64050200a1e2fae54451c677ff99670e0a44

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityValue Eyecare Network

Incidentdiscovered Jun 8, 2017

Stated responseCommenced an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com