HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Uno Alla Volta, LLC
bd_0f6d3ef89f6a1db6 · schema v1 · pii pii-v1
Full breach record for Uno Alla Volta, LLC →New Hampshire Attorney General received a breach notification from Uno Alla Volta, LLC Inc. regarding unauthorized access to its online checkout system. Between April 18 and May 1, 2018, a network intruder uploaded malicious code to the website, capturing customer names, addresses, credit card numbers, CVVs, and expiration dates. The breach affected 8 New Hampshire residents. The malicious code was disabled and security restored by May 1, 2018. Affected individuals received written notice.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_06824f3c07a5ef50Montana State AGfiled 2018-05-29(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/uno-alla-volta-20180522.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2018
- Raw hash
- 28406d8fab2d1a3c8059ca0be15618e63d72912fe66d97d4a937b1e77a343e1e
Reporting entity
- Name
- Brann & Isaacsonnorm: brann isaacson
- Domain
- brannlaw.com
Victim entity
- Name
- Uno Alla Volta, LLCnorm: uno alla volta
Incident
- Discovered
- May 1, 2018
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 8
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection and Antitrust Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.