Hudson Envelope of New Jersey Corp.
bd_9832a11d3653568d · schema v1 · pii pii-v1
Full breach record for Hudson Envelope of New Jersey Corp. →Hudson Envelope of New Jersey Corp. filed a supplemental notification with the New Hampshire Attorney General regarding a security incident on its e-commerce website. Unauthorized code, inserted due to a misconfigured perimeter access control tool, captured cardholder data (names, addresses, payment card numbers, CVV) from customers between February 2, 2021, and June 18, 2021. The incident was discovered on June 30, 2021, and notifications were mailed to 23 New Hampshire residents. Hudson removed the code, corrected the misconfiguration, and implemented enhanced logging and security features.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f5ec4eb2b633849bMaine State AGfiled 2021-08-18Candidate
- bd_721861f77a1ba630Montana State AGfiled 2021-08-19(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hudson-envelope-new-jersey-20210818.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 18, 2021
- Raw hash
- d50aadda5b4a7b64b430de7de18938a0fc7d378be5500ebe959c21df8dfbb938
Reporting entity
- Name
- Baker & Hostetler LLP (on behalf of Hudson Envelope of New Jersey Corp.)norm: baker hostetler llp on behalf of hudson envelope of new jersey
Victim entity
- Name
- Hudson Envelope of New Jersey Corp.norm: hudson envelope of new jersey
- Industry
- manufacturing
Incident
- Discovered
- Jun 30, 2021
- Materiality determined
- —
- Notification sent
- Jun 30, 2021
- Affected individuals
- 23
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella of New Hampshire
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.