HackingManufacturingRetail & ConsumerManufacturingVulnerability ExploitCustomer Data InvolvedIdentity (basic)Financial accountMediumContained

Superior Labels and Rubberstamps.net

bd_7a73c45a629de98d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 25, 2016

To disclose

—

Affected

7,000

Linked

2 filings

Confidence

65%

Full breach record for Superior Labels and Rubberstamps.net →

Superior Labels, Inc. notified customers of unauthorized access to its order management system via a vulnerability in WordPress blogging software between November 3, 2015, and December 11, 2015. Approximately 7,000 customers nationwide were potentially impacted. Affected data included names, addresses, and credit card numbers. The company removed the vulnerable software, implemented additional security measures, and offered 12 months of identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 3, 2015

Begins

Feb 25, 2016

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_297f0acfe8212c792016-02-19 · +6dCandidate

Name: Superior Labels and Rubberstamps.net
norm: superior labels and rubberstampsnet
Domain: rubberstamps.net

Name: Superior Labels and Rubberstamps.net
norm: superior labels and rubberstampsnet
Domain: rubberstamps.net
Industry: ManufacturingllmRetail & Consumerllm

Discovered: —
Breach occurred: Nov 3, 2015 – Dec 11, 2015
Materiality determined: —
Notification sent: Feb 19, 2016
Affected individuals: 7,000nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified California Attorney General
Initial access: exploit_public_facing

During the incident: Working in conjunction with law enforcement and a leading cybersecurity firm to investigate
Removed the blogging software from our website
Implemented numerous encryption, website and additional firewall precautions
Hired a reputable information cybersecurity company to identify potential security issues and resolve them
Changes made: Offering 12 months of complimentary identity protection through AllClear ID
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGFeb 19 · first

California State AG+6d · this page

Pattern: first filing Feb 19 (MT), last Feb 25 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-60210
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2016
Raw hash: c35893ed24237263030eca2995812f2ee2cba6fb45a43c7ee5732cd10925a3a3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySuperior Labels and Rubberstamps.net

Victim entitySuperior Labels and Rubberstamps.net

IncidentUnauthorized Access

Stated responseWorking in conjunction with law enforcement and a leading cybersecurity firm to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov