HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICMediumContained
Historical Emporium, inc
bd_f5cb3043f44033e8 · schema v1 · pii pii-v1
Full breach record for Historical Emporium, inc →Historical Emporium, Inc. disclosed a data breach affecting approximately 4,500 customers. Malware was present on the company's payment-processing website from March 2, 2019, to May 21, 2019, stealing payment card numbers, names, billing addresses, and expiration dates. The company removed the malware, notified law enforcement and payment brands, and enhanced system security.
California clockDiscovered May 21, 2019 → Notified May 31, 201910d ✓ CA 60-day OK14 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4,500 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147827
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 4, 2019
- Raw hash
- 7c54f2b4b2b625067d1e01efc395b6ba5bc27a983966ad3359860566d1683da9
Reporting entity
- Name
- Historical Emporium, incnorm: historical emporium
Victim entity
- Name
- Historical Emporium, incnorm: historical emporium
Incident
- Discovered
- May 21, 2019
- Materiality determined
- —
- Notification sent
- May 31, 2019
- Affected individuals
- 4,500
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the details of this breach to the payment card brands, as well as to law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 21, 2019→ Notified: May 31, 201910d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.