Volusion
bd_b433e999445bbb79 · schema v1 · pii pii-v1
Full breach record for Volusion →Volusion, LLC notified the New Hampshire Attorney General of a data security incident affecting approximately 3,170 NH residents. Malware on Volusion's e-commerce platform exposed customer data (names, addresses, credit card numbers, CVVs, expiration dates) for purchases made between Sept 7 and Oct 8, 2019. Volusion removed the malware, notified the FBI, and engaged forensic experts.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 7, 2019
Begins
Oct 8, 2019
Discovered
Apr 22, 2020
Filed
vs. sector median
+17 wks slower
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Oregon State AGbd_63436097b06950992020-04-21 · +1dVerified
- South Carolina State AGbd_daa1bef32d1f2d232020-04-21 · +1dVerified
- Montana State AGbd_28a4ba033c090f472020-04-20 · +2dVerified
- Massachusetts State AGbd_4d5326538bcdcff12020-04-20 · +2dVerified
Show 6 more filings ↓Show fewer ↑up to 112d gap
- Hawaii State AGbd_67a3dd2f7493b68a2020-04-20 · +2dVerified
- Delaware State AGbd_6ac6f52a70d9c8c92020-04-20 · +2dVerified
- Indiana State AGbd_8b37e8965834db742020-04-20 · +2dVerified
- California State AGbd_bb688789eb5f4fec2020-04-20 · +2dVerified
- Washington State AGbd_f7b3cba80f6e60b92020-04-20 · +2dVerified
- Illinois State AGbd_8249301beb911ed82020-01-01 · +112dCandidate
Filing propagation · 11 filings · 11 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Apr 22 (NH) — a 112-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.