Shumsky Promotional Agency

The California Office of the Attorney General reported that the Shumsky Promotional Agency experienced a data breach on May 14, 2013, due to unauthorized access by a third party to its e-commerce platform, affecting nearly 1,400 cardholder records. The breach potentially involved credit/debit card information including names, addresses, emails, card numbers, expiration dates, and CVV codes. The report was made on May 29, 2013.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-41885

TPRM report: https://www.rankiteo.com/company/shumsky

"id": "shu446072925",
"linkid": "shumsky",
"type": "Breach",
"date": "5/2013",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 1400,
                        'industry': 'Promotional Services',
                        'name': 'Shumsky Promotional Agency',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 1400,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Credit/Debit Card Information',
                                              'Personally Identifiable '
                                              'Information']},
 'date_detected': '2013-05-14',
 'date_publicly_disclosed': '2013-05-29',
 'description': 'Unauthorized access to the e-commerce platform of Shumsky '
                'Promotional Agency resulting in the compromise of nearly '
                '1,400 cardholder records.',
 'impact': {'data_compromised': ['Credit/Debit Card Information',
                                 'Names',
                                 'Addresses',
                                 'Emails',
                                 'Card Numbers',
                                 'Expiration Dates',
                                 'CVV Codes'],
            'payment_information_risk': True,
            'systems_affected': 'E-commerce Platform'},
 'initial_access_broker': {'entry_point': 'E-commerce Platform'},
 'references': [{'date_accessed': '2013-05-29',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Third Party',
 'title': 'Shumsky Promotional Agency Data Breach',
 'type': 'Data Breach'}