HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Paul Stuart, Inc.

bd_8be302a90d82f9c4 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 15, 2017

Filed

Jun 29, 2017

To disclose

6 weeks

Affected

27state residents only

Linked

4 filings

Confidence

67%

Full breach record for Paul Stuart, Inc. →2 incidents on file

Paul Stuart, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 27 state residents. On May 15, 2017, an unknown individual may have accessed customer payment card information (names, addresses, phone numbers, and credit/debit card details) via the company's online store. Paul Stuart secured its systems, relocated its website, and mailed notification letters on June 29, 2017, offering one year of identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

May 15, 2017

Discovered

Jun 29, 2017

Filed

vs. sector median

1 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_7346ce07b405ca242017-06-29Candidate
Massachusetts State AGbd_747f5ecce14009a42017-06-29Verified
California State AGbd_abce8c7c674c7e952017-06-29Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Paul Stuart, Inc.
norm: paul stuart
Domain: paulstuart.com
Industry: retail_consumer
Industry: Retail & Consumerllm

Discovered: May 15, 2017
Materiality determined: —
Notification sent: Jun 29, 2017
Affected individuals: 27state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Relocated its website to a more secure web environment
Implemented new additional security measures that ensure transactions remain secure
Offering potentially impacted customers identity theft protection services for one year, at no cost to the individual, through ID Experts
Providing notice to the credit reporting agencies
Changes made: Relocated its website to a more secure web environment
Implemented new additional security measures that ensure transactions remain secure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJun 29 · first

Massachusetts State AGJun 29 · first

California State AGJun 29 · first

New Hampshire State AGJun 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/paul-stuart-20170629.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2017
Raw hash: fa4bbe31cd1ef4d0412e3b595438328bcae4e1bdd282fc1366e1d34d520b9010

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityPaul Stuart, Inc.

Incidentdiscovered May 15, 2017

Stated responseRelocated its website to a more secure web environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov