DisclosureLens
HackingRetail & ConsumerRetailCapture Stored DataCustomer Data InvolvedData ExfiltratedPCIFinancial accountFinancial credentialsIdentity (basic)LowContained

Hudson Envelope of New Jersey Corp.

bd_8cc6d4e506f992d8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 11, 2021

Filed

Jun 30, 2021

To disclose

24 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

64%
Full breach record for Hudson Envelope of New Jersey Corp.

Hudson Envelope of New Jersey Corp. disclosed that unauthorized code designed to capture cardholder data was present on its e-commerce web server between June 25, 2020, and January 11, 2021. The code could have captured names, addresses, email addresses, phone numbers, payment card numbers, expiration dates, and CVVs. The company discovered the code on January 11, 2021, and immediately removed it. Enhanced logging and security features were implemented.

California clockDiscovered Jan 11, 2021Notified May 20, 2021129d CA 60-day late24 weeks discovery → filing

Incident timeline

undetected · 200 days
discovery → filing · 24 weeks / 170 days

Jun 25, 2020

Begins

Jan 11, 2021

Discovered

Jun 30, 2021

Filed

vs. sector median

+17 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filingsup to 50d gap

Filing propagation · 10 filings · 6 states

View merged incident ↗
Massachusetts State AGJun 30 · first
Maine State AGJun 30 · first
New Hampshire State AGJun 30 · first
Montana State AGJun 30 · first
Indiana State AGJun 30 · first
California State AGJun 30 · first · this page

Pattern: first filing Jun 30 (MA), last Aug 19 (MT) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.