DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsCredentialsLowContained

Stiletto Solutions

bd_c3302a5f6680c50d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 29, 2015

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%
Full breach record for Stiletto Solutions →

STILETTO Solutions disclosed unauthorized access to its e-Commerce server on September 16, 2015. The incident potentially exposed customer payment card data (including card numbers, expiration dates, and CVVs), names, addresses, emails, and login credentials for purchases made between November 1, 2013, and September 16, 2015. The company engaged forensic investigators, revised security protocols, and migrated payment data to a third-party processor. No specific count of affected individuals was disclosed in the filing.

Incident timeline

Sep 16, 2015

Begins

Oct 29, 2015

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Montana State AGOct 28 · first
California State AG+1d · this page
Massachusetts State AG+6d

Pattern: first filing Oct 28 (MT), last Nov 3 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.