HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowActive

MedAltus, LLC

bd_bc7ea3921ae9360d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 29, 2015

Filed

Aug 3, 2016

To disclose

13 months

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for MedAltus, LLC →

MedAltus, LLC notified the New Hampshire Attorney General of a data security incident where intruders accessed its ecommerce site starting May 3, 2016. The breach compromised customer names and credit card numbers via a script intercepting payment processor data. MedAltus engaged forensic investigators, reported to the Secret Service, and began notifying affected individuals (estimated 1 NH resident) on July 28, 2016.

J jump to incidentP pin to compareR raw source

Incident timeline

May 3, 2016

Begins

Aug 3, 2016

Filed

vs. sector median

+50 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_fa1fc70d7767f0932016-07-29 · +5dCandidate
Oregon State AGbd_8d89c27aeadf7dcc2016-08-24 · +21dVerified by operator

Name: SHUMAKER, LOOP & KENDRICK, LLP
norm: shumaker loop kendrick

Name: MedAltus, LLC
norm: medaltus
Industry: Retail & Consumerllm

Discovered: Jun 29, 2015
Breach occurred: May 3, 2016
Materiality determined: —
Notification sent: Jul 28, 2016
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Reported the matter to federal law enforcement authorities, including the Electronic Crimes Task Force of the United States Secret Service
Initial access: exploit_public_facing

During the incident: Retained the services of an experienced cyber security and forensic investigative firm
Reported the matter to federal law enforcement authorities, including the Electronic Crimes Task Force of the United States Secret Service
Removed any system vulnerabilities
Deleted the compromised administrative user
Changed relevant administrative passwords
Installed security patches
Increased tracking and monitoring of activity
Changes made: Installed security patches
Increased tracking and monitoring of activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(401 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJul 29 · first

New Hampshire State AG+5d · this page

Oregon State AG+26d

Pattern: first filing Jul 29 (MT), last Aug 24 (OR) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/medaltus-20160803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2016
Raw hash: b2fd44c2a14c57cff37fece3e9715e2d5f098173a69c9733a526c136adbb4acb

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySHUMAKER, LOOP & KENDRICK, LLP

Victim entityMedAltus, LLC

Incidentdiscovered Jun 29, 2015

Stated responseRetained the services of an experienced cyber security and forensic investigative firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov