HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained

LaborLawCenter, Inc

bd_4e0dcd21e77e9e25 · schema v1 · pii pii-v1

Full breach record for LaborLawCenter, Inc →

LaborLawCenter, Inc. discovered unauthorized code on its website payment platform on January 23, 2023, which captured customer payment card information between January 23 and February 28, 2023. The company removed the code, investigated the incident, and notified affected individuals and regulators. Affected data includes names and payment card information.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

bd_1189e115774946d4Montana State AGfiled 2023-04-25Candidate
bd_3653e90fb76c9d81Maine State AGfiled 2023-04-25Candidate
bd_5d3a794846a4a989Vermont State AGfiled 2023-04-25Verified
bd_e9d574ed4fcea4deNew Hampshire State AGfiled 2023-05-01(6d gap)Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-565963
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2023
Raw hash: c5f188bbb518c6ac5808c8494a930b4e3371325bfc9aa96b9ddd962da66967a6

Reporting entity

Name: LaborLawCenter, Inc
norm: laborlawcenter

Victim entity

Name: LaborLawCenter, Inc
norm: laborlawcenter

Incident

Discovered: Jan 23, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: External
Regulator citations: Notifying relevant regulators as required
Initial access: exploit_public_facing

Compliance

Time to disclose: 13 weeks(92 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.