HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Print EZ, Inc

bd_5373ca653d004715 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 14, 2018

Filed

Feb 19, 2019

To disclose

10 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Print EZ, Inc →

Print EZ, Inc. notified the NH AG of a breach affecting payment card data (name, card number, CVV) for customers who shopped between Sept 2016 and Sept 2018. A suspicious file was inserted into the e-commerce site. Print EZ modified its checkout process and notified customers via media and website posting. No specific count of affected individuals was provided.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 834 days

discovery → filing · 10 weeks / 67 days

Sep 1, 2016

Begins

Dec 14, 2018

Discovered

Feb 19, 2019

Filed

vs. sector median

on median

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_40bec230488684752019-02-15 · +4dCandidate
Massachusetts State AGbd_7b7e3366364ed9f42019-02-15 · +4dVerified
California State AGbd_c496e64f37f8e62f2019-02-15 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Print EZ, Inc
norm: print ez
Domain: printez.com
Industry: Retail & Consumerllm

Discovered: Dec 14, 2018
Breach occurred: Sep 1, 2016 – Sep 23, 2018
Undetected for: 834 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 15, 2019
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: Provided notice to New Hampshire Attorney GeneralProviding written notice of this incident to other state regulators and the consumer reporting agencies
Initial access: exploit_public_facing

During the incident: Print EZ quickly removed the infected file and took additional steps to secure its website
Print EZ completely modified its checkout process to implement additional security measures
Print EZ provided notice to customers who made purchases between September 1, 2016 and September 23, 2018
Notice was provided by notifying state wide media
Print EZ posted a copy of the notice on its website
Changes made: Print EZ implemented additional security measures to protect the payment card information entered into our website
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGFeb 15 · first

Massachusetts State AGFeb 15 · first

California State AGFeb 15 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/print-ez-20190219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 19, 2019
Raw hash: c19fb69389068fe8340caee293912d2546fa34fe9d245ecc80c8fa946cac2a71

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityPrint EZ, Inc

Incidentdiscovered Dec 14, 2018

Stated responsePrint EZ quickly removed the infected file and took additional steps to secure its website

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov