MalwareRetail & ConsumerRetailRansomwareData ExfiltratedSupply Chain (3P Vendor)PCIFinancial accountPIILowContained

Chaney Electronics, Inc.

bd_40748e8a20013a5e · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 26, 2022

Filed

Sep 19, 2022

To disclose

24 days

Affected

19state residents only

Linked

3 filings

Confidence

66%

Full breach record for Chaney Electronics, Inc. →3 incidents on file

Chaney Electronics, Inc. (dba The Electronic Goldmine) notified the NH AG of a data breach involving 19 NH residents. Third-party payment processor Freestyle Solutions, Inc. detected malware on its servers capturing payment card data (PCI) and PII from transactions between Sept 2020 and Feb 2022. Freestyle removed malware, engaged forensic experts, and notified law enforcement. Chaney offered 1 year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 707 days

discovery → filing · 24 days

Sep 18, 2020

Begins

Aug 26, 2022

Discovered

Sep 19, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Part of FreeStyle Solutions supply-chain incident (2022) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_0a169db5d4f4d1822022-09-19Candidate
Massachusetts State AGbd_39651732cca4324f2022-09-20 · +1dVerified

Name: Chaney Electronics, Inc.
norm: chaney electronics
Domain: goldmine-elec-products.com

Name: Chaney Electronics, Inc.
norm: chaney electronics
Domain: goldmine-elec-products.com
Industry: Retail & Consumerllm

Discovered: Aug 26, 2022
Breach occurred: Sep 18, 2020 – Feb 3, 2022
Undetected for: 707 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 19state-resident count only
Data types: PCIFinancial accountPII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Third party: via Freestyle Solutions, Inc.
Initial access: supply_chain

During the incident: Freestyle retained data security experts to conduct a thorough investigation
Freestyle identified and removed malware
Freestyle notified federal law enforcement authorities
Freestyle coordinating with payment card companies
Chaney secured services of Kroll to provide identity monitoring
Changes made: Blocked unauthorized activity
Provided one year of identity monitoring services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGSep 19 · first

New Hampshire State AGSep 19 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chaney-electronics-dba-electronic-goldmine-20220919.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2022
Raw hash: 592e8e2e9a8f593c9bd5fcbabea64b337c257ec462bbf46d9d79a7da8d58d806

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityChaney Electronics, Inc.

Victim entityChaney Electronics, Inc.

Incidentdiscovered Aug 26, 2022

Stated responseFreestyle retained data security experts to conduct a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov