HackingStolen CredentialsPhishingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIFINANCIAL_ACCOUNTLowContained
Datapak Services
bd_32d8425b7a2ea35b · schema v1 · pii pii-v1
Full breach record for Datapak Services →Datapak Services Corporation, a payment processor, notified New Hampshire regulators on November 6, 2013, of a security breach involving malware (Zeus) that compromised customer credit card information. The breach affected customers of several e-commerce websites. Datapak engaged forensic investigators and offered credit monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_89f1f4964aabfd61California State AGfiled 2013-11-08(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/datapak-services-20131106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2013
- Raw hash
- 377d720b19bb7d94cbe9a40eae6a10f53dd7ca9aa0eddb0d6098238b50f7331a
Reporting entity
- Name
- Datapak Servicesnorm: datapak services
- Domain
- datapakservices.com
Victim entity
- Name
- Datapak Servicesnorm: datapak services
- Domain
- datapakservices.com
Incident
- Discovered
- Mar 5, 2013
- Materiality determined
- —
- Notification sent
- Nov 6, 2013
- Affected individuals
- Not disclosed
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1498 Network Denial ServiceT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(246 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.