HackingRetail & ConsumerRetailStolen CredentialsTargetedData ExfiltratedPIIIdentity (basic)Financial accountCredentialsLowContained

Amazing Grass

bd_ba395339846b636f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 30, 2017

To disclose

—

Affected

5state residents only

Linked

3 filings

Confidence

66%

Full breach record for Amazing Grass →

Amazing Grass notified Montana residents of a data incident affecting online orders between Sept 11 and Nov 3, 2017. Unauthorized individuals installed malicious code on www.AmazingGrass.com to capture payment card info, names, addresses, and emails. No SSNs were affected. The company engaged forensic investigators, removed the script, reported to law enforcement, and offered 12 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 11, 2017

Begins

Nov 30, 2017

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_3f5b62e3715d87c82017-11-30Candidate
Massachusetts State AGbd_53b5fe41f09586932017-12-05 · +5dVerified

Name: Amazing Grass
norm: amazing grass
Domain: amazinggrass.com

Name: Amazing Grass
norm: amazing grass
Domain: amazinggrass.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Sep 11, 2017 – Nov 3, 2017
Materiality determined: —
Notification sent: Nov 27, 2017
Affected individuals: 5state-resident count only
Data types: PIIIdentity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Reported this matter to federal law enforcement
Initial access: exploit_public_facing

During the incident: Engaged an independent forensic computer firm to help us determine what may have happened
Ensured that the malicious script was removed from our website and the incident had been contained
Reported this matter to federal law enforcement and will cooperate in their investigation
Worked with our website hosting provider to update and enhance the security of the Amazing Grass website
Engaged a leading identity protection services company to provide twelve months of identity monitoring services
Changes made: Worked with our website hosting provider to update and enhance the security of the Amazing Grass website
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGNov 30 · first

Montana State AGNov 30 · first · this page

Massachusetts State AG+5d

Pattern: first filing Nov 30 (NH), last Dec 5 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Amazing-Grass.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2017
Raw hash: e3198c4911a9298a77963646ccc87592340bba0dbbcd990050ccc7d76e6d9e89

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAmazing Grass

Victim entityAmazing Grass

IncidentUnauthorized Access

Stated responseEngaged an independent forensic computer firm to help us determine what may have happened

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov