Indiana Oxygen Company
bd_066c50ae87368a73 · schema v1 · pii pii-v1
Full breach record for Indiana Oxygen Company →Welding Supplies from IOC, a subsidiary of Indiana Oxygen Company, experienced a data breach affecting its eCommerce platform. Malicious code injected into the platform allowed unauthorized access to consumer payment and personal information between September 28, 2022, and February 27, 2023. The incident was discovered on February 27, 2023, when IOC identified the malicious code. Affected data includes names, addresses, email, phone numbers, and credit/debit card information. IOC removed the code, engaged forensic specialists, and is migrating to a more secure eCommerce platform.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a5a89186348f975eMaine State AGfiled 2023-04-29Verified
- bd_1de4bf28669faeeaVermont State AGfiled 2023-04-27(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-566156
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 29, 2023
- Raw hash
- 7121baf0d1d1ae3a89b1117e5cdbbd4d4c803d6559b6246846a2acbd9f7ad57d
Reporting entity
- Name
- Indiana Oxygen Companynorm: indiana oxygen
Victim entity
- Name
- Indiana Oxygen Companynorm: indiana oxygen
Incident
- Discovered
- Feb 27, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.