HackingVulnerability ExploitTargetedPIIPCIIDENTITY_BASICLowContained
Service Lighting & Electrical Supplies, Inc.
bd_b7103c1db064e70f · schema v1 · pii pii-v1
Full breach record for Service Lighting & Electrical Supplies, Inc. →Service Lighting, Inc. notified consumers of a data breach affecting its e-commerce website. Malicious code modified the site to capture payment card data (including CVV) from transactions between March 12, 2025, and September 16, 2025. The incident was discovered via forensic investigation on February 2, 2026. No specific affected count was provided in the Vermont filing, though a separate notice for Rhode Island residents cited 95 impacted individuals.
Vermont clock⏱ VT AG >14 bday4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_02734fad6e236147Indiana State AGfiled 2026-03-04Candidate
- bd_8631ed68eab105d4California State AGfiled 2026-03-04Verified by operator
- bd_993241b084805503Indiana State AGfiled 2026-03-04Candidate
- bd_39f9a73ca21d9034Maine State AGfiled 2026-03-05(1d gap)Verified by operator
Show 3 more filings ↓Show fewer ↑up to 5d gap
- bd_629f45567b9be856Oregon State AGfiled 2026-03-05(1d gap)Verified by operator
- bd_d7188306de15b978Texas State AGfiled 2026-03-06(2d gap)Verified by operator
- bd_3b90264d81e98a0eNew Hampshire State AGfiled 2026-03-09(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-04-service-lighting-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2026
- Raw hash
- 602bdf5caa61f7fc67fee896fdcfc6e2a0c1fe591a501209fe166054a56019e7
Reporting entity
- Name
- Service Lighting & Electrical Supplies, Inc.norm: service lighting electrical supplies
Victim entity
- Name
- Service Lighting & Electrical Supplies, Inc.norm: service lighting electrical supplies
Incident
- Discovered
- Feb 2, 2026
- Materiality determined
- —
- Notification sent
- Mar 4, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIPCIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.