Stampin' Up! Inc.
bd_7ff4318d6459a4bc · schema v1 · pii pii-v1
Full breach record for Stampin' Up! Inc. →Stampin' Up! notified the New Hampshire Attorney General of a data breach affecting approximately 34 NH residents. Between June 12, 2020, and November 17, 2020, malicious code on the paperpumpkin.com e-commerce site captured payment card data (card numbers and expiration dates) during transactions. The CVV was not acquired. The breach was discovered on April 14, 2021. Stampin' Up! engaged forensic investigators, implemented enhanced security safeguards, and notified affected residents, advising them to contact financial institutions and place fraud alerts.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 12, 2020
Begins
Apr 14, 2021
Discovered
May 21, 2021
Filed
vs. sector median
2 wks faster
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Maine State AGbd_09c48203cbf823302021-05-17 · +4dCandidate
- Massachusetts State AGbd_e73a896bfc1110d02021-05-17 · +4dVerified
- Montana State AGbd_cb0557b3d1d3fa492021-05-14 · +7dCandidate
- Indiana State AGbd_db593092ec980b8f2021-05-14 · +7dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing May 14 (MT), last May 21 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.