MalwareRansomwareData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Chaney Enterprises
bd_0a169db5d4f4d182 · schema v1 · pii pii-v1
Full breach record for Chaney Enterprises →Chaney Electronics, Inc. reported a data breach involving malware on third-party vendor Freestyle Solutions' servers. The incident affected payment card information (numbers, expiration, CVV, billing address) for transactions between September 18, 2020, and February 3, 2022. Freestyle removed the malware and engaged forensic experts. Chaney provided one year of complimentary identity monitoring via Kroll to affected customers.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_40748e8a20013a5eNew Hampshire State AGfiled 2022-09-19Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557364
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2022
- Raw hash
- e3ac67600ca057ac1ef525d52b83c630f5a0a81f80fe8b47892cf4aa60021a9a
Reporting entity
- Name
- Chaney Enterprisesnorm: chaney enterprises
- Domain
- chaneyenterprises.com
Victim entity
- Name
- Chaney Enterprisesnorm: chaney enterprises
- Domain
- chaneyenterprises.com
Incident
- Discovered
- Feb 3, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement authorities
- Third party
- via Freestyle Solutions, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 33 weeks(228 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.