HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowActive
Minted, Inc.
bd_9116ee970a59d77d · schema v1 · pii pii-v1
Full breach record for Minted, Inc. →Minted, LLC notified customers of a data security incident where unauthorized actors accessed user account database records on May 6, 2020. The breach exposed names, hashed/salted passwords, and optionally telephone, billing, and shipping addresses. Minted engaged forensic experts, notified federal law enforcement, and enhanced security protocols. No payment card information was affected.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_288894f92abedb0cOregon State AGfiled 2020-05-28Candidate
- bd_fe459cbf91d355d0California State AGfiled 2020-05-28Verified
- bd_623d11ff2cca23ddWashington State AGfiled 2020-05-27(1d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2020/06/Minted-Project-Razor-Regulator-Notice-Template-Master_US_F.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2020
- Raw hash
- c8819e3385a12a014fa75002d08dda2c367e433b3c82061855d64e76f2738ffb
Reporting entity
- Name
- Minted, Inc.norm: minted
- Domain
- minted.com
Victim entity
- Name
- Minted, Inc.norm: minted
- Domain
- minted.com
Incident
- Discovered
- May 15, 2020
- Materiality determined
- —
- Notification sent
- May 28, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified U.S. federal law enforcement authorities
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.