HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTPIILowContained
Squishable.com, Inc.
bd_64f8fc08e15e855b · schema v1 · pii pii-v1
Full breach record for Squishable.com, Inc. →Squishable.com, Inc. notified the New Hampshire Attorney General of a data security incident affecting 121 NH residents. Unauthorized code on the checkout page allowed a third party to capture customer names, addresses, payment card info, and emails for purchases made between May 26 and October 12, 2022. Squishable removed the code and engaged forensic investigators.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_26dc2eee49c486e4Montana State AGfiled 2023-03-06Verified by operator
- bd_6bd9ef85cda292c9Maine State AGfiled 2023-03-06Verified
- bd_c0b7238b2f2d673bCalifornia State AGfiled 2023-03-06Verified
- bd_067484bba6b3d128Washington State AGfiled 2023-03-02(4d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 4d gap
- bd_16ee5ba23e9a9e21Vermont State AGfiled 2023-03-02(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/squishable.com-20230306.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 6, 2023
- Raw hash
- 374879e01f1aa33cd19d30224f62d8af91558b0a42562c6a4e8a7d3b9ae0495f
Reporting entity
- Name
- Squishable.com, Inc.norm: squishablecom
- Domain
- squishable.com
Victim entity
- Name
- Squishable.com, Inc.norm: squishablecom
- Domain
- squishable.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 121
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTPII
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella of the State of New Hampshire
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.