HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Altrec, Inc.
bd_dadbb7efb185d343 · schema v1 · pii pii-v1
Full breach record for Altrec, Inc. →Altrec, Inc. notified California residents of a potential data incident involving American Express card numbers, expiration dates, CVV codes, names, and addresses stored in its database. The incident occurred between June 2010 and March 2012. Forensic investigators found no evidence of a breach, but Altrec deleted the stored data, engaged a forensic firm, and reported the matter to the U.S. Secret Service. Affected individuals were offered one year of Experian ProtectMyID services.
California clockDiscovered May 7, 2012 → Notified May 24, 201217d ✓ CA 60-day OK17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-23270
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2012
- Raw hash
- d200f76915aaf81c60c88e39d6950614ce97920b939ba4936c0b86fcb02fe63a
Reporting entity
- Name
- Altrec, Inc.norm: altrec
- Domain
- altrec.com
Victim entity
- Name
- Altrec, Inc.norm: altrec
- Domain
- altrec.com
Incident
- Discovered
- May 7, 2012
- Materiality determined
- —
- Notification sent
- May 24, 2012
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this incident to the U.S. Secret Service and are fully cooperating with their investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 7, 2012→ Notified: May 24, 201217d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.