MalwareRansomwareData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Avery Products Corporation
bd_407e4c744cb63839 · schema v1 · pii pii-v1
Full breach record for Avery Products Corporation →Avery Products Corporation experienced a ransomware attempt on its payment processing application between July 18, 2024, and December 9, 2024. Malicious software was inserted into the website's cart to scrape payment card information (including CVV and expiration dates) and customer PII. 1,237 Maryland residents were affected. Avery engaged forensic investigators, secured its systems, and provided one year of credit monitoring. The incident status is contained.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,237 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376184.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- e0e27ab68f8bb953f94491e0d99449ce19e5291ceeb4992e2dd4aa63eb6e4132
Reporting entity
- Name
- Avery Dennison Corpnorm: avery dennison
- Domain
- averydennison.com
Victim entity
- Name
- Avery Products Corporationnorm: avery products
- Domain
- avery.com
Incident
- Discovered
- Dec 9, 2024
- Materiality determined
- —
- Notification sent
- Jan 15, 2025
- Affected individuals
- 1,237
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maryland Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 48 weeks(339 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.