HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

Nutrex Hawaii, Inc.

bd_3e72027e8bd59a49 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 24, 2017

To disclose

—

Affected

107state residents only

Linked

4 filings

Confidence

67%

Full breach record for Nutrex Hawaii, Inc. →2 incidents on file

Nutrex Hawaii, Inc. notified Montana residents of a security incident where an unauthorized individual gained access to the Nutrex-Hawaii.com website and installed malware to capture payment card information. The incident is contained, and federal law enforcement was notified. Affected data includes names, addresses, and payment card details.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 24, 2017

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Washington State AGbd_c9af2f44952419452017-02-25 · +1dVerified
Oregon State AGbd_58f9efec46f09eef2017-03-10 · +14dVerified
Hawaii State AGbd_cbf0aa40db5c273e2017-04-11 · +46dVerified

Name: Nutrex Hawaii, Inc.
norm: nutrex hawaii

Name: Nutrex Hawaii, Inc.
norm: nutrex hawaii
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 107state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported to federal law enforcement
Initial access: exploit_public_facing

During the incident: Communicating with the vendor that hosts and operates the website
Vendor engaged an outside forensic investigation firm
Removing the malware
Deploying file monitoring software and an endpoint security program
Reported to federal law enforcement
Vendor is cooperating with their investigation
Changes made: Removing the malware
Deploying file monitoring software
Deploying an endpoint security program
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGFeb 24 · first · this page

Washington State AG+1d

Oregon State AG+14d

Hawaii State AG+46d

Pattern: first filing Feb 24 (MT), last Apr 11 (HI) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Nutrex-Hawaii-Inc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2017
Raw hash: 119e4764814db12da840e413311867701019e1f7c9a6bf3b36ff4d0ee2955c44

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityNutrex Hawaii, Inc.

Victim entityNutrex Hawaii, Inc.

IncidentUnauthorized Access

Stated responseCommunicating with the vendor that hosts and operates the website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov