HackingRetail & ConsumerRetailAbuse Of FunctionalityCapture App DataData ExfiltratedCustomer Data InvolvedPIIPCIFINANCIALLowContained
Informa Canada Inc.
bd_71b2a3cb7c10b4c4 · schema v1 · pii pii-v1
Full breach record for Informa Canada Inc. →Informa Canada, Inc. (shopfanexpo.com) reported an external system breach in which unauthorized changes were made to the shopfanexpo.com website between April 4 and May 2, 2025. During this period, customer payment details and personal information were exposed outside normal security controls. The breach was discovered on April 23, 2025. 253 individuals total were affected, including 1 Maine resident. Experian credit monitoring was offered for 12 months.
Maine clockDiscovered Apr 23, 2025 → Filed with AG May 29, 202536d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0c7fc020-3af4-4a8f-b6c9-373284ee1f4b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2025
- Raw hash
- 828da7428429c1debb9ba3173b3252f4fde3b9b1827f2d4ca195832564bee123
Reporting entity
- Name
- Informa Canada Inc.norm: informa canada
- Domain
- shopfanexpo.com
- Industry
- Other Commercial
Victim entity
- Name
- Informa Canada Inc.norm: informa canada
- Domain
- shopfanexpo.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Apr 23, 2025
- Materiality determined
- —
- Notification sent
- Apr 25, 2025
- Affected individuals
- 1
- Data types
- PIIPCIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1059 Command and Scripting InterpreterT1185 Browser Session Hijacking
- Threat actor
- ExternalFinancial
- Regulator citations
- Maine Attorney General notification
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- ME AG >30d · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 23, 2025→ Filed with AG: May 29, 202536d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.