HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
KontrolFreek LLC (2)
bd_ff526db0fd9e2610 · schema v1 · pii pii-v1
Full breach record for KontrolFreek LLC (2) →KontrolFreek, LLC reported a data breach affecting California residents. Unauthorized third parties accessed KontrolFreek servers between October 21, 2015, and April 7, 2016, acquiring customer payment card information and personal details (name, address). KontrolFreek secured its website, hired forensic experts, and offered 12 months of identity protection services to affected individuals.
California clockDiscovered Jun 30, 2016 → Notified Jun 30, 20160d ✓ CA 60-day OK≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-62652
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2016
- Raw hash
- ac60e74710a2aa85881634bf49c182041e693f689a087e3db1eb974418a169a6
Reporting entity
- Name
- KontrolFreek LLC (2)norm: kontrolfreek llc 2
Victim entity
- Name
- KontrolFreek LLC (2)norm: kontrolfreek llc 2
Incident
- Discovered
- Jun 30, 2016
- Materiality determined
- —
- Notification sent
- Jun 30, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 30, 2016→ Notified: Jun 30, 20160d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.