THE TOPPS COMPANY, INC.
bd_e15ac00bad21aaae · schema v1 · pii pii-v1
Full breach record for THE TOPPS COMPANY, INC. →The Topps Company, Inc. reported a data breach affecting customers who made purchases on www.topps.com between November 19, 2018, and January 9, 2019. Unauthorized access to the website may have resulted in the acquisition of names, mailing addresses, phone numbers, email addresses, and payment card information (including credit/debit numbers, expiration dates, and security codes). Topps engaged an external security firm, stopped the incident, and upgraded the website platform. Notifications were sent to affected customers, with specific information provided for residents of Maryland, North Carolina, and Rhode Island.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-144902
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 21, 2019
- Raw hash
- a6133289cf2e00fea1578678fb6edf77906ac8c4e12c3d6b998bca0cbb40db54
Reporting entity
- Name
- THE TOPPS COMPANY, INC.norm: the topps
- Domain
- topps.com
Victim entity
- Name
- THE TOPPS COMPANY, INC.norm: the topps
- Domain
- topps.com
Incident
- Discovered
- Dec 26, 2018
- Materiality determined
- —
- Notification sent
- Feb 22, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 58d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 26, 2018→ Notified: Feb 22, 201958d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.