MalwareRetail & ConsumerRetailRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedPCIFinancial accountPIILowContained

Flinn Scientific, Inc.

bd_c43b6893687c19d7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 8, 2014

Filed

Oct 1, 2014

To disclose

23 days

Affected

28state residents only

Linked

3 filings

Confidence

66%

Full breach record for Flinn Scientific, Inc. →

Flinn Scientific, Inc. notified the NH AG of a security event where malware allowed an attacker to intercept payment card data (numbers, CVV, expiration, names, addresses, emails) for customers who purchased between May 2 and Sept 8, 2014. 28 NH residents affected. Discovered Sept 8, 2014. Notices sent Oct 2, 2014. Remediation included malware removal and enhanced security.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 129 days

discovery → filing · 23 days

May 2, 2014

Begins

Sep 8, 2014

Discovered

Oct 1, 2014

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_185d9c1f8514938c2014-10-01Candidate
Massachusetts State AGbd_5dfeb1c6ed44ec912014-10-02 · +1dVerified

Name: Flinn Scientific, Inc.
norm: flinn scientific
Domain: flinnsci.com

Name: Flinn Scientific, Inc.
norm: flinn scientific
Domain: flinnsci.com
Industry: Retail & Consumerllm

Discovered: Sep 8, 2014
Breach occurred: May 2, 2014 – Sep 8, 2014
Undetected for: 129 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 2, 2014
Affected individuals: 28state-resident count only
Data types: PCIFinancial accountPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Immediately took steps to eliminate the malware and block any further unauthorized access to our servers
Promptly contacted our acquiring bank
Reported the matter to the payment card brands who are involved
Fully cooperating with the card brands and the procedures under the payment card industry rules
Implemented additional security measures designed to specifically counter how the attacker managed to gain access to our web server
Changes made: Implemented additional security measures designed to specifically counter how the attacker managed to gain access to our web server to ensure this will not happen again
Continually evaluating and modifying our practices to enhance the security and privacy of the personal information of our customers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGOct 1 · first

New Hampshire State AGOct 1 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/flinn-scientific-20141001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2014
Raw hash: 9eaa58d2fc5010de09d8a9e3cbc089a2fc9775db33aacdbf11d2d5249472bbc5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFlinn Scientific, Inc.

Victim entityFlinn Scientific, Inc.

Incidentdiscovered Sep 8, 2014

Stated responseImmediately took steps to eliminate the malware and block any further unauthorized access to our servers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov