HackingData ExfiltratedCustomer Data InvolvedPIIFINANCIAL_ACCOUNTLowContained
SERRV International
bd_08ffdb5fb7d5760d · schema v1 · pii pii-v1
Full breach record for SERRV International →SERRV International, a fair trade nonprofit, notified the New Hampshire Attorney General of a data security incident involving its third-party e-commerce platform, CommerceV3. An unauthorized party accessed CommerceV3's systems between November 24, 2021, and December 14, 2022. The incident potentially compromised customer payment card information. SERRV notified 142 New Hampshire residents on August 25, 2023. CommerceV3 conducted a forensic investigation with third-party experts and implemented additional security measures.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_c0397a66ed1f65a3Washington State AGfiled 2023-08-29Candidate
- bd_c3a7e9d559999fc5Oregon State AGfiled 2023-08-29Verified
- bd_ed8988c26ba5160aMaine State AGfiled 2023-08-29Verified
- bd_17e5ef2969179386California State AGfiled 2023-08-28(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_dfb5cf626154740cMontana State AGfiled 2023-08-28(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/serrv-international-20230829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2023
- Raw hash
- c352d2cf461fea28df634700e32cbd411dcc8625983365eab3ed7b26f53fd744
Reporting entity
- Name
- SERRV Internationalnorm: serrv international
- Domain
- serrv.org
Victim entity
- Name
- SERRV Internationalnorm: serrv international
- Domain
- serrv.org
Incident
- Discovered
- Jul 17, 2023
- Materiality determined
- —
- Notification sent
- Aug 25, 2023
- Affected individuals
- 142
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.