Social EngineeringPhishingStolen CredentialsEmployee Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTFINANCIAL_ACCOUNTMediumContained
Mollie Stone's Market
bd_e70f563a8e75c8be · schema v1 · pii pii-v1
Full breach record for Mollie Stone's Market →Mollie Stone's Markets disclosed a phishing incident on March 17, 2017, where an employee received a fraudulent email appearing to be from a senior executive. This led to the unauthorized access of an email account containing IRS Form W-2s for 2016, exposing employees' names, addresses, Social Security numbers, and wage information. The company secured the account, notified the IRS and federal law enforcement, and is offering three years of identity theft protection to affected employees.
California clockDiscovered Mar 17, 2017 → Notified Mar 23, 20176d ✓ CA 60-day OK10 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-67171
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 27, 2017
- Raw hash
- 3dcd6b2fdf3b8eebdedfaacb2f394a87da770b55e939ed07fa3dbd21dae16b8b
Reporting entity
- Name
- Mollie Stone's Marketnorm: mollie stone s market
- Domain
- molliestones.com
Victim entity
- Name
- Mollie Stone's Marketnorm: mollie stone s market
- Domain
- molliestones.com
Incident
- Discovered
- Mar 17, 2017
- Materiality determined
- —
- Notification sent
- Mar 23, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the IRSNotified federal law enforcement authorities
- Initial access
- phishing_link
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 6d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 17, 2017→ Notified: Mar 23, 20176d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.