DisclosureLens
HackingCustomer Data InvolvedFinancial accountFinancial credentialsMedium

Hudson Envelope of New Jersey Corp.

bd_22f4969ff663e043 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 30, 2021

Filed

Jun 30, 2021

To disclose

≤1 day

Affected · nationwide

6,51763 in this filing

Linked

10 filings

Confidence

50%
Full breach record for Hudson Envelope of New Jersey Corp. →

Hudson Envelope of New Jersey Corp. experienced an external system breach (hacking) that occurred from June 25, 2020, to January 11, 2021. The breach was discovered on June 30, 2021. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their associated security codes, access codes, passwords, or PINs. A total of 6,517 individuals were affected, including 63 residents of Maine.

Maine clockDiscovered Jun 30, 2021 → Filed with AG Jun 30, 20210d ✓ ME AG ≤30d≤1 day discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 370 days
discovery → filing · ≤1 day / 0 days

Jun 25, 2020

Begins

Jun 30, 2021

Discovered

Jun 30, 2021

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 50d gap

Filing propagation · 10 filings · 6 states

View merged incident ↗
Massachusetts State AGJun 30 · first
New Hampshire State AGJun 30 · first
Montana State AGJun 30 · first
California State AGJun 30 · first
Indiana State AGJun 30 · first
Maine State AGJun 30 · first · this page
Indiana State AG+49d
New Hampshire State AG+49d
Maine State AG+49d
Montana State AG+50d

Pattern: first filing Jun 30 (MA), last Aug 19 (MT) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.