HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedTargetedIdentity (basic)Financial accountMediumContained

Superior Labels and Rubberstamps.net

bd_297f0acfe8212c79 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 19, 2016

To disclose

—

Affected · nationwide

7,00034 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Superior Labels and Rubberstamps.net →

Superior Labels, Inc. notified customers of unauthorized access to its order management system via a WordPress vulnerability between Nov 3 and Dec 11, 2015. Approximately 7,000 customers nationwide were potentially affected. Exposed data included names, addresses, and credit card numbers. The company engaged law enforcement and a cybersecurity firm, removed the vulnerable software, and enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 3, 2015

Begins

Feb 19, 2016

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_7a73c45a629de98d2016-02-25 · +6dVerified

Name: Superior Labels and Rubberstamps.net
norm: superior labels and rubberstampsnet

Name: Superior Labels and Rubberstamps.net
norm: superior labels and rubberstampsnet
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 3, 2015 – Dec 11, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 7,000state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Working in conjunction with law enforcement
Initial access: exploit_public_facing

During the incident: Removed the blogging software from our website
Implemented numerous encryption, website and additional firewall precautions
Hired a reputable information cybersecurity company to identify potential security issues and resolve them
Changes made: Implemented numerous encryption, website and additional firewall precautions
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGFeb 19 · first · this page

California State AG+6d

Pattern: first filing Feb 19 (MT), last Feb 25 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Superior-Labels.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 19, 2016
Raw hash: fe1896ec356895bbd6472149a3b3d31b9b916c384246851ccfa3cebe60c35050

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySuperior Labels and Rubberstamps.net

Victim entitySuperior Labels and Rubberstamps.net

IncidentUnauthorized Access

Stated responseRemoved the blogging software from our website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov