HackingTechnologyRetail & ConsumerInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PIIIdentity (basic)Financial accountFinancial credentialsLowContained

Altern Marketing, LLC

bd_bc7cd59bd2c63e7f · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 30, 2020

Filed

Dec 15, 2020

To disclose

7 weeks

Affected

52state residents only

Linked

2 filings

Confidence

66%

Full breach record for Altern Marketing, LLC →

Altern Marketing, LLC reported that 1ShoppingCart, its payment processor, suffered a data breach affecting transactions from Aug 6-22, 2020. Unauthorized access exposed customer names, addresses, emails, and payment card details (including CVV). Incident discovered Oct 30, 2020. No SSNs involved.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 85 days

discovery → filing · 7 weeks / 46 days

Aug 6, 2020

Begins

Oct 30, 2020

Discovered

Dec 15, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_f0e7cc8c8ce8a7e02020-12-17 · +2dVerified

Name: Altern Marketing, LLC
norm: altern marketing

Name: Altern Marketing, LLC
norm: altern marketing
Industry: TechnologyllmRetail & Consumerllm

Discovered: Oct 30, 2020
Breach occurred: Aug 6, 2020 – Aug 22, 2020
Undetected for: 85 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 52state-resident count only
Data types: PIIIdentity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Third party: via 1ShoppingCart
Initial access: valid_credentials

During the incident: Requested that 1ShoppingCart provide us with additional information about the incident
Requested a list of individuals who may have been impacted
Working with 1ShoppingCart to obtain additional information about the nature of the event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGDec 15 · first · this page

New Hampshire State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/alternSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 15, 2020
Raw hash: c738c9a71593cee7b0f08b5552ea93f4046bb52dfed05d72136802e3c828cce1

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAltern Marketing, LLC

Victim entityAltern Marketing, LLC

Incidentdiscovered Oct 30, 2020

Stated responseRequested that 1ShoppingCart provide us with additional information about the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov