HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
InvoiceCloud
bd_72c05a49298b8e95 · schema v1 · pii pii-v1
Full breach record for InvoiceCloud →InvoiceCloud, a digital payment solutions provider, disclosed a security event on June 16, 2025, where unauthorized code was placed on systems supporting customer websites. The incident exposed customer names, addresses, emails, and payment card details (including CVV and expiration dates). InvoiceCloud engaged forensic investigators and is offering one year of credit monitoring and identity restoration services.
Vermont clock⏱ VT AG >14 bday4 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_83a6de7d7eecefa4Maine State AGfiled 2025-07-16Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-16-invoicecloud-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2025
- Raw hash
- 7bd2bb22a2bfa44629dd4f00b62fd6567ca1f977a5d6aa649f048d827f8898fd
Reporting entity
- Name
- InvoiceCloudnorm: invoicecloud
- Domain
- invoicecloudservice.com
Victim entity
- Name
- InvoiceCloudnorm: invoicecloud
- Domain
- invoicecloudservice.com
Incident
- Discovered
- Jun 16, 2025
- Materiality determined
- —
- Notification sent
- Jul 16, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.