HackingSkimmerData ExfiltratedCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
Special Buys Clothing Inc.
bd_b7879b167a37cbd0 · schema v1 · pii pii-v1
Full breach record for Special Buys Clothing Inc. →Special Buys Clothing DBA Bargain Balloons issued a supplemental notice to New Hampshire AG regarding a skimming attack affecting customer PII and credit card data. The incident occurred between Sept 27 and Dec 28, 2022, with 24 NH residents affected. The company rebuilt its website and limited payments to PayPal.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_47ae83101c7c238cMaine State AGfiled 2023-01-20(10d gap)Verified
- bd_e92b589788940062California State AGfiled 2023-01-19(11d gap)Verified
- bd_7f2e9177a73a8535Montana State AGfiled 2022-12-13(48d gap)Verified
- bd_d002a3fd6a695621New Hampshire State AGfiled 2022-12-12(49d gap)Candidate
Show 2 more filings ↓Show fewer ↑up to 52d gap
- bd_92d668249e35cf79Maine State AGfiled 2022-12-09(52d gap)Candidate
- bd_d39d671c575ae478California State AGfiled 2022-12-09(52d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/special-buys-clothing-dba-bargain-balloons-20230130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2023
- Raw hash
- 5f5d4ee2bb9e7be96689e816697c33ad18aaeda5fa1a33c6a226b3f347f44d3d
Reporting entity
- Name
- Special Buys Clothing Inc.norm: special buys clothing
Victim entity
- Name
- Special Buys Clothing Inc.norm: special buys clothing
Incident
- Discovered
- Nov 7, 2022
- Materiality determined
- Jan 16, 2023
- Notification sent
- Jan 28, 2023
- Affected individuals
- 24
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1056 Input CaptureT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.