HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTLowResolved
Spreadshirt
bd_0d5194e30c2d3733 · schema v1 · pii pii-v1
Full breach record for Spreadshirt →Spreadshirt Inc. experienced an external system breach where an unauthorized party gained access to its systems. The breach was discovered on July 7, 2021, and occurred on or around July 1, 2021. The investigation concluded that user bank account numbers may have been accessed along with other personal identifiers.
Maine clockDiscovered Jul 7, 2021 → Filed with AG Aug 9, 202133d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_430daa99b4a0bcbeOregon State AGfiled 2021-08-09Verified
- bd_6e111a0325d04821Washington State AGfiled 2021-08-09Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b787d966-4ad0-43c6-a78c-13697b0fc115.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 9, 2021
- Raw hash
- ca7ab3ca019dd954567efd416275c8faf98e4d80d2e7e71271e4c1ed6bfc0a51
Reporting entity
- Name
- Spreadshirtnorm: spreadshirt
- Domain
- spreadshirt.com
Victim entity
- Name
- Spreadshirtnorm: spreadshirt
- Domain
- spreadshirt.com
Incident
- Discovered
- Jul 7, 2021
- Materiality determined
- —
- Notification sent
- Jul 8, 2021
- Affected individuals
- 137
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- ME AG >30d · 33d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 7, 2021→ Filed with AG: Aug 9, 202133d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.