HackingIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Hawaii Coffee Company LLC
bd_0aff9f941d00defb · schema v1 · pii pii-v1
Full breach record for Hawaii Coffee Company LLC →Hawaii Coffee Company notified the New Hampshire Attorney General of a breach affecting 15 state residents. Unauthorized access to its BigCommerce e-commerce platform occurred between February 14, 2023, and March 22, 2023. The incident compromised names and payment card information for a subset of transactions. The company discovered the breach on June 14, 2023, and mailed notifications to affected residents on September 25, 2023. Remediation included enhancing email security.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_747493305017ba2dMaine State AGfiled 2023-09-26Candidate
- bd_8b040a24556f5d95Montana State AGfiled 2023-09-25(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hawaii-coffee-company-20230926.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2023
- Raw hash
- f76bec386a33675578732d2939a8fa2dcdb43ae8239a16053c83507001191895
Reporting entity
- Name
- Hawaii Coffee Company LLCnorm: hawaii coffee
Victim entity
- Name
- Hawaii Coffee Company LLCnorm: hawaii coffee
Incident
- Discovered
- Jun 14, 2023
- Materiality determined
- —
- Notification sent
- Sep 25, 2023
- Affected individuals
- 15
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(104 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.