HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Welding Supplies from IOC and Weld My Ride, subsidiaries of Indiana Oxygen Company (IOC)
bd_03d61ff230d80cdf · schema v1 · pii pii-v1
Full breach record for Welding Supplies from IOC and Weld My Ride, subsidiaries of Indiana Oxygen Company (IOC) →Indiana Oxygen Company (IOC) subsidiaries Welding Supplies from IOC and Weld My Ride experienced an unauthorized access incident involving malicious code injected into their eCommerce platform. The exposure window was September 25, 2022, to February 27, 2023, when the code was identified and removed. Affected data includes names, addresses, emails, phone numbers, and credit/debit card information. IOC engaged law enforcement and forensic specialists and is switching to a more secure eCommerce platform.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e6123d6c09344b72Maine State AGfiled 2023-04-13Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-565483
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 13, 2023
- Raw hash
- 0159d72ae6344c899b57804f63918bf4a3252a6308177056a4fb6808e7c1ec71
Reporting entity
- Name
- Indiana Oxygen Companynorm: indiana oxygen
Victim entity
- Name
- Welding Supplies from IOC and Weld My Ride, subsidiaries of Indiana Oxygen Company (IOC)norm: welding supplies from ioc and weld my ride subsidiaries of indiana oxygen company ioc
Incident
- Discovered
- Feb 27, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.