HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowActive
MedAltus, LLC
bd_bc7ea3921ae9360d · schema v1 · pii pii-v1
Full breach record for MedAltus, LLC →MedAltus, LLC notified the New Hampshire Attorney General of a data security incident where intruders accessed its ecommerce site starting May 3, 2016. The breach compromised customer names and credit card numbers via a script intercepting payment processor data. MedAltus engaged forensic investigators, reported to the Secret Service, and began notifying affected individuals (estimated 1 NH resident) on July 28, 2016.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_fa1fc70d7767f093Montana State AGfiled 2016-07-29(5d gap)Candidate
- bd_8d89c27aeadf7dccOregon State AGfiled 2016-08-24(21d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/medaltus-20160803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2016
- Raw hash
- b2fd44c2a14c57cff37fece3e9715e2d5f098173a69c9733a526c136adbb4acb
Reporting entity
- Name
- SHUMAKER, LOOP & KENDRICK, LLPnorm: shumaker loop kendrick
Victim entity
- Name
- MedAltus, LLCnorm: medaltus
Incident
- Discovered
- Jun 29, 2015
- Materiality determined
- —
- Notification sent
- Jul 28, 2016
- Affected individuals
- 1
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the matter to federal law enforcement authorities, including the Electronic Crimes Task Force of the United States Secret Service
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(401 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.