HackingRetail & ConsumerTechnologyRetailVulnerability ExploitCapture Stored DataTargetedData ExfiltratedIdentity (basic)Financial accountLowActive

Edmund Optics, Inc.

bd_73812cccafa850a1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 26, 2012

Filed

Mar 13, 2012

To disclose

16 days

Affected

4state residents only

Linked

2 filings

Confidence

66%

Full breach record for Edmund Optics, Inc. →

Edmund Optics, Inc. notified the NH Attorney General of a data breach where hackers exploited a ColdFusion 8 vulnerability between Feb 8-26, 2012. Customer PII and credit card info were accessed. 4 NH residents affected. EO engaged forensic experts (Trustwave, Kroll) and legal counsel, patched the vulnerability, and upgraded to ColdFusion 9.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 18 days

discovery → filing · 16 days

Feb 8, 2012

Begins

Feb 26, 2012

Discovered

Mar 13, 2012

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e6792b9ac0e7fe492012-03-14 · +1dVerified

Name: Edmund Optics, Inc.
norm: edmund optics
Domain: edmundoptics.com

Name: Edmund Optics, Inc.
norm: edmund optics
Domain: edmundoptics.com
Industry: Retail & ConsumerllmTechnologyllm

Discovered: Feb 26, 2012
Breach occurred: Feb 8, 2012 – Feb 26, 2012
Undetected for: 18 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 13, 2012
Affected individuals: 4state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralProvided notification to the New Jersey State Police Regional Operations Intelligence CenterProvided notice to other state regulators and various regulators in involved foreign countriesProvided notice to the three major consumer credit reporting agenciesNotified the United States Secret Service field office in Philadelphia, Pennsylvania
Initial access: exploit_public_facing

During the incident: Retained breach notification legal counsel, Nelson, Levine, de Luca & Horst, LLC
Retained forensic computer analysts, Trustwave and Kroll, Inc.
Shut down access to its website from the IP address generating the suspicious activity
Applied a security patch to eliminate the vulnerability in ColdFusion 8
Removed malicious code found on its web server
Upgraded to ColdFusion 9
Re-applied all relevant security patches to secure the site
Provided notification to the New Jersey State Police Regional Operations Intelligence Center
Provided notice to other state regulators and various regulators in involved foreign countries
Provided notice to the three major consumer credit reporting agencies (Experian, Equifax and Trans Union)
Notified the United States Secret Service field office in Philadelphia, Pennsylvania
Undergoing a Payment Card Industry forensic audit
Changes made: Upgraded to ColdFusion 9, which provides newer security features
Re-applied all relevant security patches to secure the site
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 13 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/edmund-optics-20120313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2012
Raw hash: 3c93de545d9176096a808c464679e954c7da6631720b3bff7f0225fb4f1ef352

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEdmund Optics, Inc.

Victim entityEdmund Optics, Inc.

Incidentdiscovered Feb 26, 2012

Stated responseRetained breach notification legal counsel, Nelson, Levine, de Luca & Horst, LLC

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov