Metabolic Maintenance Products, Inc.
bd_02657066f49b5ed7 · schema v1 · pii pii-v1
Full breach record for Metabolic Maintenance Products, Inc. →Metabolic Maintenance Products, Inc. filed a supplemental data breach notification with the New Hampshire Attorney General regarding unauthorized access to its website. An unknown third party installed malicious code on the site between May 2020 and July 9, 2021, capturing and transmitting customer transaction data, including names, addresses, and payment card information. The breach affected 67 New Hampshire residents. Metabolic engaged forensic investigators, removed the malicious code, and implemented security enhancements including firewall updates and traffic detection.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1c1326d9cd7e560fMontana State AGfiled 2021-09-16Candidate
- bd_598facb0d98549caCalifornia State AGfiled 2021-09-16Verified
- bd_a85bb19664898a7cMaine State AGfiled 2021-09-16Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/metabolic-maintenance-products-20210916.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2021
- Raw hash
- 69345d4606901479c442e9281b46ec3fbcfefddb62c710e5d44ad98bb5b87030
Reporting entity
- Name
- Metabolic Maintenance Products, Inc.norm: metabolic maintenance products
Victim entity
- Name
- Metabolic Maintenance Products, Inc.norm: metabolic maintenance products
Incident
- Discovered
- Sep 1, 2020
- Materiality determined
- —
- Notification sent
- Sep 16, 2021
- Affected individuals
- 67
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1074 Data StagedT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the credit card brands and law enforcement regarding the incident
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(380 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.