norm: peak gameUSno LEI · no CIKMax severity: Low

Canonical registry

Peak Design

ent_d8c651f7661eb517414fb849

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Peak Design
Normalized: peak game— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: peakpeakpeak.com

Disclosure history (1)newest first

California State AGas reporting2024-06-06
Peak Design disclosed a data compromise involving historical customer service tickets from October 2013 to May 2023. On March 11, 2024, a security gap was inadvertently created when a private server hosting the information was accidentally made externally accessible due to a misconfiguration. The issue was detected by Cybernews on April 25, 2024, and promptly fixed. Peak Design believes the data was compromised on April 1, 2024, by an unauthorized third party. Affected data includes customer names, emails, shipping addresses, order details, and correspondence. No passwords, credit card info, bank info, or SSNs were compromised. Peak Design implemented an IT approval protocol and enhanced training to prevent recurrence.