HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsCredentialsLowContained

ECS Tuning, Inc.

bd_f41621f315fbc495 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 19, 2012

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for ECS Tuning, Inc. →2 incidents on file

ECS Tuning, Inc. disclosed unauthorized access to customer personal information between May 6 and May 10, 2012. Affected data included names, addresses, emails, phone numbers, account passwords, and full credit/debit card details (numbers, expiration dates, security codes). The company secured the system, notified credit card companies, and filed a police report. Remediation included integrating PayPal Payflow Pro and ceasing storage of card data.

J jump to incidentP pin to compareR raw source

Incident timeline

May 6, 2012

Begins

Jun 19, 2012

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_7a8fc6b1cbf641362012-06-19Verified

Name: ECS Tuning, Inc.
norm: ecs tuning
Domain: ecstuning.com

Name: ECS Tuning, Inc.
norm: ecs tuning
Domain: ecstuning.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: May 6, 2012 – May 10, 2012
Materiality determined: —
Notification sent: May 22, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentialsCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed a case with the local Wadsworth, Ohio Police Department

During the incident: Secured the system to prevent any further compromises
Identified and secured the method of unauthorized access
Notified the credit card companies
Filed a case with the local Wadsworth, Ohio Police Department
Changes made: Integrated PayPal’s Payflow Pro to add additional security to the ECS checkout process
Removed the storage of credit and debit cards for any length of time regardless of order status
Added extra layers of security to ensure our customer privacy, such as scanning all inbound and outbound traffic
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 19 · first

California State AGJun 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-32059
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2012
Raw hash: d3d59e305f6083fd57fc5ef74a5a8e0876375fcb9199fc65a4344ec0c782f0b1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityECS Tuning, Inc.

Victim entityECS Tuning, Inc.

IncidentUnauthorized Access

Stated responseSecured the system to prevent any further compromises

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov