HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowActive
Cutting Tools Inc
bd_9fb80a1f4e067127 · schema v1 · pii pii-v1
Full breach record for Cutting Tools Inc →Cutting Tools Inc voluntarily notified the Idaho Attorney General of a third-party data breach involving its e-commerce platform provider, SignatureIT Ltd. The breach, discovered on November 16, 2023, involved unauthorized access to SignatureIT's systems, potentially compromising customer PII and credentials. Cutting Tools notified approximately 1 US resident and relevant regulators, including the FBI and CISA.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2023/12/12-19-2023-Cutting-Tools-Inc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2023
- Raw hash
- 60d6c2b72ae2ddb9da1f255d57e1b3948bd99ddfd393bf4cd77058637f55940c
Reporting entity
- Name
- Cutting Tools Incnorm: cutting tools
Victim entity
- Name
- Cutting Tools Incnorm: cutting tools
Incident
- Discovered
- Nov 16, 2023
- Materiality determined
- —
- Notification sent
- Dec 19, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the U.S. Federal Bureau of InvestigationNotified the Cybersecurity and Infrastructure Security Agency under the Cyber Incident Reporting for Critical Infrastructure ActNotified applicable U.S. state agenciesNotified the E.U. under the General Data Protection Regulation
- Third party
- via SignatureIT Ltd.
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.