HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Event Rental Systems
bd_5578d5188eaa0470 · schema v1 · pii pii-v1
Full breach record for Event Rental Systems →Event Rental Systems (operated by Fullsteam Software Holdings LLC) disclosed a security event where unauthorized code was inserted into customer website modules between October 2024 and October 2025. The code scraped payment card data (number, CVV, expiration) and customer contact info. 6 New Hampshire residents were affected. The company engaged forensic investigators, notified law enforcement and card brands, removed the code, and offered 12 months of credit monitoring via Experian. Notifications began December 15, 2025.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_694e75732fd59f24Oregon State AGfiled 2025-12-22(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/event-rental-systems-fullsteam-software-20251215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2025
- Raw hash
- e9b102c7f4cf678aab9c2085c2b0bc070ebb242362e3478bd0f9651c14073a59
Reporting entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Victim entity
- Name
- Event Rental Systemsnorm: event rental
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Dec 15, 2025
- Affected individuals
- 6
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.