HackingVulnerability ExploitCustomer Data InvolvedTargetedPIIFINANCIAL_ACCOUNTLowContained
Green Bay Packers – packers.com
bd_1c79b4fb10fbe2b0 · schema v1 · pii pii-v1
Full breach record for Green Bay Packers – packers.com →Green Bay Packers, Inc. notified the NH AG of a security incident on its Pro Shop website where malicious code inserted by a third party allowed unauthorized viewing/acquisition of customer checkout data (including payment info) for 7 NH residents between Sept 23 and Oct 23, 2024. GBP detected the code on Oct 23, 2024, engaged forensic experts, and is offering credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_872a4fab4a12fc61Wisconsin State AGfiled 2025-01-06Verified
- bd_a742f8136d48612dCalifornia State AGfiled 2025-01-06Candidate
- bd_bb8d1110067d538eIndiana State AGfiled 2025-01-06Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/green-bay-packers-20250106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 6, 2025
- Raw hash
- 72572067254115352964264fcf4737c2cb102ad016e5f8b1dbfde69da631ba18
Reporting entity
- Name
- Green Bay Packers – packers.comnorm: green bay packers packerscom
- Domain
- packers.com
Victim entity
- Name
- Green Bay Packers – packers.comnorm: green bay packers packerscom
- Domain
- packers.com
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- Dec 20, 2024
- Notification sent
- Jan 6, 2025
- Affected individuals
- 7
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1074 Data Staged
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.