MalwareRansomwareData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTPIILowContained
Silver Superstore
bd_f08f4df802ae8e8d · schema v1 · pii pii-v1
Full breach record for Silver Superstore →Silver Superstore notified California AG that malware on vendor Freestyle Solutions' servers compromised payment card data (numbers, CVV, billing address) for customers who shopped between Sept 20, 2020, and Feb 2, 2022. The vendor engaged forensic experts, removed the malware, and notified law enforcement. No specific count of affected individuals was disclosed in this filing.
California clockDiscovered Feb 2, 2022 → Notified Aug 30, 2022209d ✗ CA 60-day late31 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_79f61f2c56c19300Washington State AGfiled 2022-09-11(2d gap)Verified by operator
- bd_8b993efe903bc3d2Oregon State AGfiled 2022-09-11(2d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557078
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2022
- Raw hash
- a9cc3fb7d347ad2de524cb1ebe5b313a564dc620539d6bd8baa6dfe169f9ebb3
Reporting entity
- Name
- Silver Superstorenorm: silver superstore
Victim entity
- Name
- Silver Superstorenorm: silver superstore
Incident
- Discovered
- Feb 2, 2022
- Materiality determined
- —
- Notification sent
- Aug 30, 2022
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Third party
- via Freestyle Solutions, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 31 weeks(219 days from discovery to filing)
- Compliance flags
- CA 60-day late · 209d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 2, 2022→ Notified: Aug 30, 2022209d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.