MalwareRetail & ConsumerRetailCapture App DataInfostealerData ExfiltratedCustomer Data InvolvedPIIPCILowContained
Wheels Manufacturing, LLC
bd_2fa31d1a14dfb9f1 · schema v1 · pii pii-v1
Full breach record for Wheels Manufacturing, LLC →Wheels Manufacturing, LLC discovered on November 12, 2024 that malware was present on its e-commerce website between October 7, 2024 and November 4, 2024, potentially enabling unauthorized access to customer information including names, addresses, phone numbers, and payment card data. 683 individuals were affected in total, including 5 Maine residents. Third-party security experts removed the malware and additional safeguards were implemented.
Maine clockDiscovered Nov 12, 2024 → Filed with AG Dec 6, 202424d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1611c6083fda0b8cNew Hampshire State AGfiled 2024-12-06Verified
- bd_5a34348bba969345Indiana State AGfiled 2024-12-06Verified
- bd_8e69ce8588bdd729Vermont State AGfiled 2024-12-06Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fddc4356-ed80-43e5-8450-5ace9cca2b8d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 6, 2024
- Raw hash
- bbefd08bb28ff67572972cb0df1861f4c9a12630155e751bc6fdc8128c8c117e
Reporting entity
- Name
- Wheels Manufacturing, LLCnorm: wheels manufacturing
- Domain
- wheelsmfg.com
- Industry
- Other Commercial
Victim entity
- Name
- Wheels Manufacturing, LLCnorm: wheels manufacturing
- Domain
- wheelsmfg.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Nov 12, 2024
- Materiality determined
- —
- Notification sent
- Dec 6, 2024
- Affected individuals
- 5
- Data types
- PIIPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1056 Input CaptureT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 12, 2024→ Filed with AG: Dec 6, 202424d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.