PhysicalRetail & ConsumerRetailSkimmerCustomer Data InvolvedFinancial accountFinancial credentialsLowActive

Mitsuwa Corporation

bd_f590e8d83370d67f · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 14, 2023

Filed

Aug 18, 2023

To disclose

4 days

Affected

Not disclosed

Confidence

65%

Full breach record for Mitsuwa Corporation →

Mitsuwa Corporation discovered a credit card skimmer on a POS device at its San Diego store on August 14, 2023. The skimmer may have collected credit card numbers and security codes. Mitsuwa contacted the San Diego Police Department, who removed the device. The investigation is ongoing, and the precise timeframe of the skimmer's presence is unknown. Mitsuwa has reminded store management of the need for vigilance in monitoring POS devices.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 14, 2023 → Notified Aug 18, 20234d ✓ CA 60-day OK4 days discovery → filing

Incident timeline

discovery → filing · 4 days

Aug 14, 2023

Discovered

Aug 18, 2023

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Mitsuwa Corporation
norm: mitsuwa

Name: Mitsuwa Corporation
norm: mitsuwa
Industry: Retail & Consumerllm

Discovered: Aug 14, 2023
Materiality determined: —
Notification sent: Aug 18, 2023
Affected individuals: Not disclosed
Data types: Financial accountFinancial credentials
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Contacted the San Diego Police Department

During the incident: Contacted the San Diego Police Department
Reminded store management at all of its locations in the U.S. of the continuing need for vigilance in monitoring its POS devices to ensure that those devices are not tampered with
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 days(4 days from discovery to filing)
Compliance flags: CA 60-day OK · 4d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 14, 2023
→ Notified: Aug 18, 2023
4d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 14, 2023 → Notified: Aug 18, 2023	4d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-572081
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 18, 2023
Raw hash: cf05db77ea566811ae1f9cf314021b802e02bd3eb0a4e9f150d5fb055dc4a64f

Reporting entityMitsuwa Corporation

Victim entityMitsuwa Corporation

Incidentdiscovered Aug 14, 2023

Stated responseContacted the San Diego Police Department

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov