HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountFinancial credentialsLowContained

Fred Usinger Inc

bd_06092f4fb2b6e6d5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 7, 2018

Filed

Mar 29, 2018

To disclose

22 days

Affected

88state residents only

Linked

3 filings

Confidence

64%

Full breach record for Fred Usinger Inc →

Fred Usinger, Inc. notified customers of a data breach involving its e-commerce hosting provider. Unauthorized access occurred between September 2017 and March 2018, exposing names, addresses, emails, phone numbers, credit card numbers, and security codes. The company engaged ID Experts for identity theft recovery services and notified consumer reporting agencies.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 187 days

discovery → filing · 22 days

Sep 1, 2017

Begins

Mar 7, 2018

Discovered

Mar 29, 2018

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_be9cc8bc78f810e72018-03-28 · +1dCandidate
Massachusetts State AGbd_043d88f3ef7cc9972018-04-02 · +4dVerified

Name: Fred Usinger Inc
norm: fred usinger

Name: Fred Usinger Inc
norm: fred usinger
Industry: Retail & Consumerllm

Discovered: Mar 7, 2018
Breach occurred: Sep 1, 2017 – Mar 1, 2018
Undetected for: 187 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 29, 2018
Affected individuals: 88state-resident count only
Data types: PIIIdentity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: trusted_relationship

During the incident: Conducting a thorough review of the computer systems and protocols impacting its e-commerce website
Rigorously reviewing the information security processes and procedures implemented by its hosting service provider
Working with key third-party vendors to ensure that appropriate security measures are in place
Notified the major consumer reporting agencies about this incident
Offering to all our affected customers identity theft recovery services through ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGMar 28 · first

Montana State AG+1d · this page

Massachusetts State AG+5d

Pattern: first filing Mar 28 (CA), last Apr 2 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Fred-Usinger-Inc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 29, 2018
Raw hash: 0ef7813c652e97b823799e3b4b99cf58a060b4a1c7a1e55d082b778db6223706

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFred Usinger Inc

Victim entityFred Usinger Inc

Incidentdiscovered Mar 7, 2018

Stated responseConducting a thorough review of the computer systems and protocols impacting its e-commerce website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov