MalwareRansomwareData ExfiltratedCustomer Data InvolvedData EncryptedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Flinn Scientific, Inc.
bd_c43b6893687c19d7 · schema v1 · pii pii-v1
Full breach record for Flinn Scientific, Inc. →Flinn Scientific, Inc. experienced a cybersecurity incident involving malware infiltration of its e-commerce servers. The breach occurred between May 2, 2014, and September 8, 2014, exposing customer names, addresses, email addresses, payment card numbers, verification codes, and expiration dates. The company contained the threat, removed the malware, and offered one year of complimentary identity theft protection and credit monitoring to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_185d9c1f8514938cCalifornia State AGfiled 2014-10-01Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/flinn-scientific-20141001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 1, 2014
- Raw hash
- 3f9fbf4c3d90e89495091f4bd1bd48d6084af46d78a45c0953db66fdd5ec2691
Reporting entity
- Name
- Flinn Scientific, Inc.norm: flinn scientific
- Domain
- flinnsci.com
Victim entity
- Name
- Flinn Scientific, Inc.norm: flinn scientific
- Domain
- flinnsci.com
Incident
- Discovered
- Sep 8, 2014
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.