HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Carl's Golfland, Inc.
bd_f65db5f674f0c7e4 · schema v1 · pii pii-v1
Full breach record for Carl's Golfland, Inc. →Carl's Golfland, Inc. disclosed a cybersecurity incident affecting its online shopping website. Between March 25 and July 14, 2019, an unauthorized party accessed customer data including credit card numbers, expiration dates, CVVs, names, addresses, emails, and phone numbers. The breach was discovered via a bank inquiry in late June 2019. Carl's Golfland cooperated with the Secret Service, conducted a forensic audit, and offered one year of credit monitoring to affected customers.
California clockDiscovered Jun 30, 2019 → Notified Jul 14, 201914d ✓ CA 60-day OK9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7d90af25dbac36dcMontana State AGfiled 2019-08-30Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-150216
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 30, 2019
- Raw hash
- 30bbcad96baf4db77728f8b17953b997c20ad1531559b7c80154c7bc0026e21a
Reporting entity
- Name
- Carl's Golfland, Inc.norm: carl s golfland
- Domain
- carlsgolfland.com
Victim entity
- Name
- Carl's Golfland, Inc.norm: carl s golfland
- Domain
- carlsgolfland.com
Incident
- Discovered
- Jun 30, 2019
- Materiality determined
- —
- Notification sent
- Jul 14, 2019
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Cooperated with the United States Secret Service
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 14d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 30, 2019→ Notified: Jul 14, 201914d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.