HackingData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICLowContained
Gapbuster Worldwide Pty Ltd
bd_085bfdee92dbd5d4 · schema v1 · pii pii-v1
Full breach record for Gapbuster Worldwide Pty Ltd →Gapbuster Worldwide Pty Ltd reported a data breach involving 57 independent contractors. The breach was caused by third-party vendor Nectar Desk, which erroneously exposed mystery shopper data on a public AWS S3 bucket after GBW ended its subscription. GBW detected the incident on May 30, 2024, and notified affected individuals on June 2, 2024.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_052327572fa08ab5Idaho State AGfiled 2024-06-04Candidate
- bd_a85b7e063d378f4eCalifornia State AGfiled 2024-06-04Verified
- bd_9e297168849119baMaine State AGfiled 2024-06-05(1d gap)Verified
- bd_3f82215f16bf076fVermont State AGfiled 2024-06-02(2d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gapbuster-worldwide-20240604.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 4, 2024
- Raw hash
- 05c55ab26eace0f43492d94012eb9f23b4747509ffebde9663fff4174d633179
Reporting entity
- Name
- Gapbuster Worldwide Pty Ltdnorm: gapbuster worldwide
- Domain
- gbw.solutions
Victim entity
- Name
- Gapbuster Worldwide Pty Ltdnorm: gapbuster worldwide
- Domain
- gbw.solutions
Incident
- Discovered
- May 30, 2024
- Materiality determined
- —
- Notification sent
- Jun 2, 2024
- Affected individuals
- 57
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- Partner
- Regulator citations
- Notification to the supervising authorities of other demographics have been notified
- Third party
- via Nectar Desk
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 days(5 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.