HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Setuno, Inc.
bd_3dddd7397fc09754 · schema v1 · pii pii-v1
Full breach record for Setuno, Inc. →Setuno, Inc. (d/b/a Shopping Cart Elite) reported an external system breach (hacking) occurring between May 4, 2020, and May 11, 2020. The incident compromised names and financial account/credit card numbers (including security codes/PINs). 1,678 individuals were affected, including 9 Maine residents. The breach was discovered on January 29, 2021, and written notification was sent on February 10, 2021. No identity theft protection services were offered.
Maine clockDiscovered Jan 29, 2021 → Filed with AG Feb 21, 202123d ✓ ME AG ≤30d23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,678 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0aba5b11-c219-4a4f-b5b7-e118ece0210d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 21, 2021
- Raw hash
- 4c79c880fb71a207358ffc577a665a0220b115f58d053fa9c84db3bd30bf2bda
Reporting entity
- Name
- Setuno, Inc.norm: setuno
Victim entity
- Name
- Setuno, Inc.norm: setuno
Incident
- Discovered
- Jan 29, 2021
- Materiality determined
- —
- Notification sent
- Feb 10, 2021
- Affected individuals
- 1,678
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 23d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 29, 2021→ Filed with AG: Feb 21, 202123d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.