HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICCREDENTIALSLowContained
Freedom Management Group, LLC
bd_63ca626a9e0beaf0 · schema v1 · pii pii-v1
Full breach record for Freedom Management Group, LLC →Freedom Management Group, LLC dba The Natural disclosed a data breach affecting customers who made online or phone purchases between April 22, 2014, and July 17, 2014. The incident involved unauthorized access to payment card data, including credit/debit card numbers, expiration dates, CVVs, names, addresses, emails, phone numbers, and passwords. The company engaged in forensic investigation, closed the access point, removed malware, and notified financial institutions. Affected individuals received 12 months of identity protection via AllClear ID.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_815dc8b1b9af3a61New Hampshire State AGfiled 2014-08-19(7d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-46191
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 12, 2014
- Raw hash
- 833ef3ea9220afd86d4ef219e03aecc64d588f8a4bc00245128fdb6319d2e13c
Reporting entity
- Name
- Freedom Management Group, LLCnorm: freedom management
- Domain
- thenaturalonline.com
Victim entity
- Name
- Freedom Management Group, LLCnorm: freedom management
- Domain
- thenaturalonline.com
Incident
- Discovered
- Jul 15, 2014
- Materiality determined
- Aug 12, 2014
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- notified the necessary credit card companies, credit bureaus and attorney generals
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.