JB Autosports, Inc. data breach (2016)

Breach window
Aug 1, 2015 → Nov 9, 2015
When the intrusion reportedly occurred, per the linked filings
100 days
Breach discovered
Nov 9, 2015
Reported by CALIFORNIA AG filing
64 days
🐻California State AGFirst filinglinked via multistate filing link · 100%
Filed Jan 12, 2016bd_cea101dfa6a03bb6
JB Autosports, Inc. disclosed a cybersecurity incident affecting customers who purchased products from subispeed.com and ft86speedfactory.com between August 1, 2015, and November 9, 2015. Cyberattackers originating from a Russian IP address intercepted customer names, addresses, and credit card details (including CVV/CVC/CID) during checkout transmission to PayPal. JB Autosports contracted a third-party vendor for investigation, improved cybersecurity defenses, and notified credit card networks and PayPal. No law enforcement investigation delayed the notice.
🦬Montana State AG
Filed Jan 13, 2016bd_264b378e4c0e3e1c
JB Autosports, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2016-01-13. The breach occurred from 8/1/2015 to 11/9/2015. 11 Montana residents were affected.
Affected (this filing): 11
49 days
🦫Oregon State AGMost recentlinked via multistate filing link · 95%
Filed Mar 2, 2016bd_802114c6f12f7a21
JB AUTOSPORTS INC reported a data breach to the Oregon Attorney General. The breach was reported on 2016-03-02. The breach occurred during 8/1/2015 - 11/9/2015. Notice was sent on 1/8/2016.

JB Autosports, Inc.