Volusion
bd_f7b3cba80f6e60b9 · schema v1 · pii pii-v1
Full breach record for Volusion →Volusion, LLC reported a malware incident affecting Washington residents. Unauthorized access occurred between Sept 7 and Oct 8, 2019, exposing customer PII and payment data (names, addresses, credit card numbers, CVVs). Volusion detected the incident on Oct 8, 2019, engaged forensic experts, notified the FBI, and removed the malware. Approximately 14,111 Washington residents were affected. Notices were sent in April 2020.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 7, 2019
Begins
Oct 8, 2019
Discovered
Apr 20, 2020
Filed
vs. sector median
+17 wks slower
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Montana State AGbd_28a4ba033c090f472020-04-20Verified
- Massachusetts State AGbd_4d5326538bcdcff12020-04-20Verified
- Hawaii State AGbd_67a3dd2f7493b68a2020-04-20Verified
- Delaware State AGbd_6ac6f52a70d9c8c92020-04-20Verified
Show 6 more filings ↓Show fewer ↑up to 110d gap
- Indiana State AGbd_8b37e8965834db742020-04-20Verified
- California State AGbd_bb688789eb5f4fec2020-04-20Verified
- Oregon State AGbd_63436097b06950992020-04-21 · +1dVerified
- South Carolina State AGbd_daa1bef32d1f2d232020-04-21 · +1dVerified
- New Hampshire State AGbd_b433e999445bbb792020-04-22 · +2dVerified
- Illinois State AGbd_8249301beb911ed82020-01-01 · +110dCandidate
Filing propagation · 11 filings · 11 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Apr 22 (NH) — a 112-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.