HackingFinancial ServicesTechnologyFinanceStolen CredentialsTargetedIdentity (basic)Government IDMediumActive

Netcoins (USA) Inc.

bd_9e7359e31ea9ee2e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 17, 2023

Filed

Oct 25, 2023

To disclose

5 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Netcoins (USA) Inc. →2 incidents on file

Netcoins (USA) Inc. reported a cybersecurity incident on September 17, 2023, where suspicious activity was detected and shut down within an hour. An unauthorized attempt to access user PII (names, SSNs, IDs) occurred, but no data compromise was confirmed. The company reset passwords, engaged forensic investigators, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 38 days

Sep 17, 2023

Begins

Sep 17, 2023

Discovered

Oct 25, 2023

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Netcoins (USA) Inc.
norm: netcoins usa
Domain: netcoins.com

Name: Netcoins (USA) Inc.
norm: netcoins usa
Domain: netcoins.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Sep 17, 2023
Breach occurred: Sep 17, 2023 – Sep 17, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 12, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Reported the incident to law enforcement
Initial access: exploit_public_facing

During the incident: Reported the incident to law enforcement
Performed a hard reset on all account passwords
Updated all internal passwords, password management system, tokens and keys
Conducting a forensic investigation with the assistance of an independent cybersecurity team
Sent notice of this to our users via email
Issued a press release with further detail
Changes made: Made immediate enhancements to systems, security, and practices
Providing free Credit Monitoring services for 12 months
Providing proactive fraud assistance through Cyberscout through Identity Force
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/11/Consumer-Breach-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2023
Raw hash: 827c424155a744e549d35e62c74b9e1483667def4249bec875f8434be05a6c32

Reporting entityNetcoins (USA) Inc.

Victim entityNetcoins (USA) Inc.

Incidentdiscovered Sep 17, 2023

Stated responseReported the incident to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov