HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountMediumContained

Pono Products, Inc.

bd_f4474e5eb6dff761 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 9, 2012

To disclose

—

Affected

1,000scope not determined

Linked

2 filings

Confidence

64%

Full breach record for Pono Products, Inc. →

Pono Products, Inc. (dba reuseit.com) disclosed a security breach occurring between August 22 and September 28, 2011. An intruder gained unauthorized access to the website and intercepted personal data from 1,000 customers, including login credentials, passwords, and credit card information. The company offered one year of complimentary credit monitoring via Experian's ProtectMyID program.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 22, 2011

Begins

Apr 9, 2012

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_445b8dc84cc63ad02012-03-29 · +11dCandidate

Name: Pono Products, Inc.
norm: pono products
Domain: reuseit.com

Name: Pono Products, Inc.
norm: pono products
Domain: reuseit.com
Also named: Pono Products, Inc.dba oflegal entity
reuseit.comdba oftrade name
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Aug 22, 2011 – Sep 28, 2011
Materiality determined: —
Notification sent: —
Affected individuals: 1,000scope not determined
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Offered a free credit monitoring service
Changes made: Taken corrective action to prevent such intrusions from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 29 · first

California State AG+11d · this page

Pattern: first filing Mar 29 (NH), last Apr 9 (CA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-22954
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2012
Raw hash: a51cb1a6fb248f7a6f1f6e6b2181a249d14bef31bfb8f73d7890436c764e5445

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPono Products, Inc.

Victim entityPono Products, Inc.

IncidentUnauthorized Access

Stated responseOffered a free credit monitoring service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov