HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Untapped LLC
bd_2335e347aff98edd · schema v1 · pii pii-v1
Full breach record for Untapped LLC →UnTapped LLC reported a cybersecurity incident to the New Hampshire Attorney General on July 21, 2023. The company became aware of unusual login activity on April 12, 2023, and later discovered unauthorized code on its website. The incident affected 487 individuals, including 26 New Hampshire residents. Personal information was potentially impacted, though no actual misuse was confirmed. UnTapped engaged incident response teams, changed credentials, and provided credit monitoring services.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_f9023cb1396084b0Maine State AGfiled 2023-07-21Verified
- bd_4b2f5aa0e56fe174Montana State AGfiled 2023-07-20(1d gap)Candidate
- bd_66efab087112e904Vermont State AGfiled 2023-07-20(1d gap)Verified
- bd_9845c04fed52d466Maine State AGfiled 2023-07-20(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/untapped-20230721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2023
- Raw hash
- 5daae5e4a41d8d408ce0456cc2e009b9209d0b8e6d4c22e68cc7b7e662c15c66
Reporting entity
- Name
- The Beckage Firmnorm: the beckage firm
- Domain
- thebeckagefirm.com
Victim entity
- Name
- Untapped LLCnorm: untapped
- Domain
- untappedllc.com
Incident
- Discovered
- Apr 12, 2023
- Materiality determined
- —
- Notification sent
- Jul 21, 2023
- Affected individuals
- 487
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.