DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

THE TOPPS COMPANY, INC.

bd_e15ac00bad21aaae · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 26, 2018

Filed

Feb 21, 2019

To disclose

8 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%
Full breach record for THE TOPPS COMPANY, INC. →2 incidents on file

The Topps Company, Inc. experienced unauthorized access to its website (www.topps.com) between November 19, 2018, and January 9, 2019. The company became aware of the incident on December 26, 2018. Customer data potentially compromised includes names, mailing addresses, telephone numbers, email addresses, and payment card information (card number, expiration date, security code). Topps engaged an external security firm, contained the incident, and upgraded its website platform.

California clockDiscovered Dec 26, 2018 → Notified Feb 22, 201958d ✓ CA 60-day OK8 weeks discovery → filing

Incident timeline

undetected · 37 days
discovery → filing · 8 weeks / 57 days

Nov 19, 2018

Begins

Dec 26, 2018

Discovered

Feb 21, 2019

Filed

vs. sector median

+1 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Massachusetts State AGFeb 21 · first
California State AGFeb 21 · first · this page
New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.