HackingManufacturingRetail & ConsumerManufacturingCustomer Data InvolvedIdentity (basic)Financial accountAuthenticationLowContained

BLAUER MANUFACTURING CO., INC.

bd_548eef39dc5bedc5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2019

Filed

Dec 2, 2019

To disclose

6 weeks

Affected · nationwide

1612 in this filing

Linked

3 filings

Confidence

66%

Full breach record for BLAUER MANUFACTURING CO., INC. →2 incidents on file

Blauer Manufacturing Co., Inc. notified the NH Attorney General of a data event affecting 12 NH residents and 4 organizations. Suspicious activity on blauer.com was identified on Oct 23, 2019. Transactions between Sep 26 and Oct 23, 2019 may have had card data (name, address, card number, CVV, passwords) accessed. Blauer engaged forensic investigators and is offering 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 27 days

discovery → filing · 6 weeks / 40 days

Sep 26, 2019

Begins

Oct 23, 2019

Discovered

Dec 2, 2019

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_b84d75d15d3efc282019-12-05 · +3dVerified
Montana State AGbd_6c8e6eea4cad1f912019-11-22 · +10dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: BLAUER MANUFACTURING CO., INC.
norm: blauer manufacturing
Domain: blauer.com
Industry: manufacturing
Industry: ManufacturingllmRetail & Consumerllm

Discovered: Oct 23, 2019
Breach occurred: Sep 26, 2019 – Oct 23, 2019
Undetected for: 27 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2019
Affected individuals: 16state + nationwide
Data types: Identity (basic)Financial accountAuthentication
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reported to certain state regulators and law enforcement
Initial access: exploit_public_facing

During the incident: Launched an investigation with the assistance of a third-party forensic firm
Took steps to implement other procedures to further protect the security of customer debit and credit card information
Provided notice to potentially impacted individuals
Made voluntary disclosures to entities that were potentially impacted
Providing access to credit monitoring services for 1 year through Kroll
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Planning to implement further security and operational upgrades
Working to implement additional security measures and safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 22 · first

New Hampshire State AG+10d · this page

Massachusetts State AG+13d

Pattern: first filing Nov 22 (MT), last Dec 5 (MA) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/blauer-manufacturing-20191202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2019
Raw hash: f4978662919f4eb4231f629abcd36cfc7051f39e4feddeb5b37831f932579975

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityBLAUER MANUFACTURING CO., INC.

Incidentdiscovered Oct 23, 2019

Stated responseLaunched an investigation with the assistance of a third-party forensic firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov