HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTCREDENTIALSIDENTITY_BASICLowContained
Freedom Management Group, LLC
bd_815dc8b1b9af3a61 · schema v1 · pii pii-v1
Full breach record for Freedom Management Group, LLC →Freedom Management Group (dba The Natural) disclosed a breach affecting TheNaturalOnline.com where unauthorized access occurred between April 22 and July 17, 2014. The incident compromised customer payment card data, CVVs, and personal information. The company engaged forensic investigators, closed the access point, removed malware, and notified financial institutions. Affected individuals received 12 months of identity protection via AllClear ID.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_63ca626a9e0beaf0California State AGfiled 2014-08-12(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/freedom-management-natural-20140819.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 19, 2014
- Raw hash
- 0e261b397534579fc84a4290e45696d7d387028bd30656954128e54d27a4de66
Reporting entity
- Name
- Freedom Management Group, LLCnorm: freedom management
- Domain
- thenaturalonline.com
Victim entity
- Name
- Freedom Management Group, LLCnorm: freedom management
- Domain
- thenaturalonline.com
Incident
- Discovered
- Jul 15, 2014
- Materiality determined
- —
- Notification sent
- Aug 12, 2014
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTCREDENTIALSIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- The Natural notified the necessary credit card companies, credit bureaus and attorney generals
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.