HackingIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Spencer Gifts LLC
bd_3299e43485b49f6c · schema v1 · pii pii-v1
Full breach record for Spencer Gifts LLC →Spencer Gifts LLC experienced an external system breach between November 24 and November 26, 2021, discovered on November 25, 2021. The breach affected 10,024 individuals, compromising names and financial account information, including credit/debit card numbers with their security codes. Affected individuals were notified on January 24, 2022, and offered one year of credit monitoring and identity theft protection services.
Maine clockDiscovered Nov 25, 2021 → Filed with AG Jan 24, 202260d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by conti about this victim predates this filing by 50 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_134105033d4688abCalifornia State AGfiled 2022-01-24Candidate
- bd_9e247c7d6362456bMontana State AGfiled 2022-01-24Verified
- bd_fc5a7f6f8ca435c3New Hampshire State AGfiled 2022-01-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f6ddc35a-0dea-4c8a-a1fc-d97f6da3a437.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2022
- Raw hash
- 040cb1bfbbcbefcdbbacf1bf072351568e7532ffb64ab744a83ce24e0fb0099f
Reporting entity
- Name
- Spencer Gifts LLCnorm: spencer gifts
Victim entity
- Name
- Spencer Gifts LLCnorm: spencer gifts
Incident
- Discovered
- Nov 25, 2021
- Materiality determined
- —
- Notification sent
- Jan 24, 2022
- Affected individuals
- 10,024
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- ME AG >30d · 60dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 25, 2021→ Filed with AG: Jan 24, 202260d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.