HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Great Companions
bd_1b88822ab2703118 · schema v1 · pii pii-v1
Full breach record for Great Companions →Great Companions notified New Hampshire residents of a data breach involving its third-party e-commerce provider, CommerceV3. Unauthorized access occurred between November 24, 2021, and December 14, 2022. Approximately 34 NH residents were notified on October 19, 2023. Affected data included names, addresses, and potentially government IDs. Great Companions provided credit monitoring via IDX and notified regulators and credit bureaus.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1d87705d273f2b70Vermont State AGfiled 2023-10-19Verified
- bd_4afd523d84b6156aMaine State AGfiled 2023-10-19Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/great-companions-20231019.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 19, 2023
- Raw hash
- a8de3384859c8756242fcc44e9d7aa90a242ac7cf2115b4af9310a91f1545f8f
Reporting entity
- Name
- Great Companionsnorm: great companions
Victim entity
- Name
- Great Companionsnorm: great companions
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Oct 19, 2023
- Affected individuals
- 34
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- providing written notice of this event to relevant state regulators
- Third party
- via CommerceV3
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.