HackingRetail & ConsumerRetailStolen CredentialsTargetedData ExfiltratedIdentity (basic)Financial accountMediumContained

Value Eyecare Network

bd_92f9bf1770984769 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 8, 2017

Filed

Jul 21, 2017

To disclose

6 weeks

Affected

1,111state residents only

Linked

5 filings

Confidence

66%

Full breach record for Value Eyecare Network →2 incidents on file

Value Eyecare Network, Inc. d/b/a 39dollarglasses.com notified the NH AG of a data security incident discovered June 8, 2017. An unknown individual accessed customer names, addresses, phone numbers, and credit/debit card info. 1,111 NH residents affected. Notifications mailed July 21, 2017. Remediation included website relocation and security upgrades; 1-year identity theft protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 43 days

Jun 8, 2017

Discovered

Jul 21, 2017

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_6ec8b0bf657362c22017-07-21Candidate
California State AGbd_8de2dc2d0f98bafe2017-07-21Verified
Washington State AGbd_d7ce869376b6ea8f2017-07-21Verified
Oregon State AGbd_e4674e914d3749df2017-07-21Verified

Name: Value Eyecare Network
norm: value eyecare network
Domain: 39dollarglasses.com

Name: Value Eyecare Network
norm: value eyecare network
Domain: 39dollarglasses.com
Also named: Value Eyecare Network, Inc.dba oflegal entity
39dollarglasses.comdba oftrade name
Industry: Retail & Consumerllm

Discovered: Jun 8, 2017
Materiality determined: —
Notification sent: Jul 21, 2017
Affected individuals: 1,111state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Commenced an investigation to determine what information may have been accessed
Re-coding and relocating its website to a more secure web environment
Implementing additional security measures that ensure customer transactions remain secure
Offering potentially impacted customers identity theft protection services for one year, at no cost to the individual, through AllClear ID
Notice is also being provided to the credit reporting agencies
Changes made: Re-coding and relocating its website to a more secure web environment
Implementing additional security measures that ensure customer transactions remain secure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJul 21 · first

California State AGJul 21 · first

Washington State AGJul 21 · first

Oregon State AGJul 21 · first

New Hampshire State AGJul 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/value-eyecare-20170721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2017
Raw hash: 52d1191129db4f21ed4733d944ea92826a1d38f2642f03a707106c973bc3e1d1

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityValue Eyecare Network

Victim entityValue Eyecare Network

Incidentdiscovered Jun 8, 2017

Stated responseCommenced an investigation to determine what information may have been accessed

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov