HackingVulnerability ExploitCapture Stored DataCustomer Data InvolvedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
360training.com, Inc.
bd_1922769e6f08d535 · schema v1 · pii pii-v1
Full breach record for 360training.com, Inc. →360training.com, Inc. notified the NH AG of a data incident affecting mortgageeducators.com customers. Between May 12-15, 2025, unauthorized parties added malicious code to capture credit card data and names. One NH resident was affected. 360training engaged forensic specialists, removed the code, and offered 12 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/360training-20250728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2025
- Raw hash
- 36b93c52fb44ef266cbd2205ab0f09194951982644a182fa86ba8e77d7b061ef
Reporting entity
- Name
- 360training.com, Inc.norm: 360trainingcom
- Domain
- 360training.com
Victim entity
- Name
- 360training.com, Inc.norm: 360trainingcom
- Domain
- 360training.com
Incident
- Discovered
- May 12, 2025
- Materiality determined
- May 30, 2025
- Notification sent
- Jul 23, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.