HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Thirty Three Threads, Inc.
bd_5bfca0aa505e3e23 · schema v1 · pii pii-v1
Full breach record for Thirty Three Threads, Inc. →Thirty Three Threads, Inc. reported to the New Hampshire Attorney General that between September 22 and October 5, 2016, its internet system was hacked, exposing personal information of 4 state residents. The breach, discovered on October 4, 2016, involved customer names, addresses, purchase details, and credit card numbers with security codes. The company contained the breach, removed planted code, and provided 12 months of identity theft mitigation services to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/thirty-three-threads-20161031.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 31, 2016
- Raw hash
- 6a856c646cc3a2b3faa29eefb62f8b628ce823f4eaff675312e06582f796edf9
Reporting entity
- Name
- Thirty Three Threads, Inc.norm: thirty three threads
- Domain
- thirtythreethreads.com
Victim entity
- Name
- Thirty Three Threads, Inc.norm: thirty three threads
- Domain
- thirtythreethreads.com
Incident
- Discovered
- Oct 4, 2016
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 4
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.