HackingRetail & ConsumerRetailSkimmerCustomer Data InvolvedData ExfiltratedIdentity (basic)CredentialsFinancial accountFinancial credentialsLowResolved

The Crucible

bd_f1fea8ad5f4df5a9 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 30, 2020

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for The Crucible →

The Crucible disclosed a data breach affecting its e-commerce website (TheCrucible.org) between April 28, 2019, and February 27, 2020. Malicious code (a skimmer) on the site captured data inputted during checkout, including names, addresses, emails, phone numbers, usernames, passwords, and full payment card details (card number, expiration, CVV). The organization removed the code, disabled card processing, investigated the incident, and added malware scanning. No specific count of affected individuals was provided.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 28, 2019

Begins

May 30, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The Crucible
norm: the crucible
Domain: thecrucible.org

Name: The Crucible
norm: the crucible
Domain: thecrucible.org
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Apr 28, 2019 – Feb 27, 2020
Materiality determined: —
Notification sent: May 29, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)CredentialsFinancial accountFinancial credentials
Attack vector: Unknown
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Reported security incident to the California Department of Justice
Initial access: exploit_public_facing

During the incident: Disabled use of all debit and credit cards on TheCrucible.org
Removed malicious code immediately upon discovery
Conducted thorough investigation into how the skimmer worked
Reported security incident to the California Department of Justice
Added an additional third malware scanner to regular security scans
Changes made: Reactivated use of credit and debit card transactions after investigation and safeguards
Added an additional third malware scanner to regular security scans
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-190506
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 30, 2020
Raw hash: d4e88e73df0c53e3bf61fee9224aa0ab4ea544a4c1d7a35796f38e6a953e2f33

Reporting entityThe Crucible

Victim entityThe Crucible

IncidentUnknown

Stated responseDisabled use of all debit and credit cards on TheCrucible.org

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov