HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICFINANCIAL_ACCOUNTPCILowContained
Metabolic Maintenance Products, Inc.
bd_598facb0d98549ca · schema v1 · pii pii-v1
Full breach record for Metabolic Maintenance Products, Inc. →Metabolic Maintenance Products, Inc. reported a data breach affecting transactions processed through its websites from May 2020 to July 2021. An unknown third party installed malicious code to capture and exfiltrate customer names, addresses, and payment card information. The company engaged forensic investigators, removed the code, and notified law enforcement and credit card brands. Approximately 55 Rhode Island residents were explicitly identified as affected.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1c1326d9cd7e560fMontana State AGfiled 2021-09-16Candidate
- bd_a85bb19664898a7cMaine State AGfiled 2021-09-16Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-545415
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2021
- Raw hash
- b21c84782355d7f8bbcde4c942b9f3f5c7690effb711f31a73ffcbaaea768950
Reporting entity
- Name
- Metabolic Maintenance Products, Inc.norm: metabolic maintenance products
Victim entity
- Name
- Metabolic Maintenance Products, Inc.norm: metabolic maintenance products
Incident
- Discovered
- Jul 9, 2021
- Materiality determined
- Aug 20, 2021
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNTPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.