The California Office of the Attorney General reported a data breach involving Outdoor Network LLC on September 9, 2013. The breach occurred between December 14, 2012, and July 24, 2013, due to unauthorized third parties inserting malware into the shopping cart portions of the company's websites, potentially exposing names, addresses, credit card numbers, card expiration dates, and card security codes. Approximately UNKN individuals were affected.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-42624
TPRM report: https://www.rankiteo.com/company/outdoor-network---usa
"id": "out128072525",
"linkid": "outdoor-network---usa",
"type": "Breach",
"date": "12/2012",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'UNKN',
'industry': 'Retail',
'name': 'Outdoor Network LLC',
'type': 'Company'}],
'attack_vector': 'Malware',
'data_breach': {'number_of_records_exposed': 'UNKN',
'personally_identifiable_information': ['names', 'addresses'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'credit card numbers',
'card expiration dates',
'card security codes']},
'date_detected': '2013-07-24',
'date_publicly_disclosed': '2013-09-09',
'description': 'The California Office of the Attorney General reported a data '
'breach involving Outdoor Network LLC on September 9, 2013. '
'The breach occurred between December 14, 2012, and July 24, '
'2013, due to unauthorized third parties inserting malware '
"into the shopping cart portions of the company's websites, "
'potentially exposing names, addresses, credit card numbers, '
'card expiration dates, and card security codes. Approximately '
'UNKN individuals were affected.',
'impact': {'data_compromised': ['names',
'addresses',
'credit card numbers',
'card expiration dates',
'card security codes'],
'systems_affected': "Shopping cart portions of the company's "
'websites'},
'initial_access_broker': {'entry_point': 'Shopping cart portions of the '
"company's websites"},
'post_incident_analysis': {'root_causes': 'Unauthorized third parties '
'inserting malware'},
'references': [{'date_accessed': '2013-09-09',
'source': 'California Office of the Attorney General'}],
'threat_actor': 'Unauthorized third parties',
'title': 'Data Breach at Outdoor Network LLC',
'type': 'Data Breach',
'vulnerability_exploited': "Shopping cart portions of the company's websites"}