DisclosureLens
MalwareRetail & ConsumerRetailRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Financial accountCredentialsLowContained

Lime Crime, Inc.

bd_29e88ea99e1580f0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 11, 2015

Filed

Mar 10, 2015

To disclose

27 days

Affected

189state residents only

Linked

3 filings

Confidence

66%
Full breach record for Lime Crime, Inc. →

Lime Crime, Inc. filed a supplemental notice with the New Hampshire AG regarding a malware incident on its e-commerce server. Unauthorized individuals installed malicious software between Oct 4, 2014, and Feb 15, 2015, compromising customer PII and payment card data. The incident was discovered on Feb 11, 2015. 189 NH residents were affected. The company engaged forensic investigators, took the site offline, replaced the e-commerce platform, and offered credit monitoring.

Incident timeline

undetected · 130 days
discovery → filing · 27 days

Oct 4, 2014

Begins

Feb 11, 2015

Discovered

Mar 10, 2015

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
California State AGFeb 24 · first
Massachusetts State AG+3d
New Hampshire State AG+14d · this page

Pattern: first filing Feb 24 (CA), last Mar 10 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.