HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIPCIIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Fioravanti Custom Products LLC
bd_267a174838a5f2f2 · schema v1 · pii pii-v1
Full breach record for Fioravanti Custom Products LLC →Fioravanti Custom Products LLC (dba Essential Wholesale & Labs) notified the NH AG of a data security incident where unauthorized code on its website allowed a third party to capture customer checkout data (names, addresses, payment card info, emails) for purchases made between April 27–May 22, 2022, and Oct 11–Nov 5, 2022. 10 NH residents were affected. The company removed the code, engaged forensic investigators, and notified law enforcement and card brands.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4e3065c2023cb4fbMontana State AGfiled 2023-02-22Candidate
- bd_72199beaf71b9a33Maine State AGfiled 2023-02-22Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/fioravanti-custom-products-20230222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 22, 2023
- Raw hash
- 367a6bd0c536e051ecd94d3d1758e65ae693f91c15c38e02cb794d4f104ca383
Reporting entity
- Name
- Fioravanti Custom Products LLCnorm: fioravanti custom products
Victim entity
- Name
- Fioravanti Custom Products LLCnorm: fioravanti custom products
Incident
- Discovered
- May 22, 2022
- Materiality determined
- Oct 3, 2022
- Notification sent
- Feb 21, 2023
- Affected individuals
- 10
- Data types
- PIIPCIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 39 weeks(276 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.