HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

Wingra Direct, LLC

bd_cecfa6f84c0f0a99 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 21, 2023

Filed

May 9, 2023

To disclose

18 days

Affected

4state residents only

Linked

5 filings

Confidence

66%

Full breach record for Wingra Direct, LLC →

Wingra Direct, LLC (SharpeningSupplies.com) notified customers of a data breach where unauthorized access occurred on April 18, 2023. Personal information including names, billing addresses, and credit card details (number, CVV, expiration) were accessed. Wingra secured the site and offered 12 months of credit monitoring via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 18 days

Apr 18, 2023

Begins

Apr 21, 2023

Discovered

May 9, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_18ce94b71bda72b32023-05-09Verified
Massachusetts State AGbd_c072a8278033e7622023-05-09Verified
Maine State AGbd_c1af3fb41a65bcd42023-05-09Verified
New Hampshire State AGbd_d0c08d61af07a1c42023-05-12 · +3dVerified

Name: Wingra Direct, LLC
norm: wingra direct
Domain: sharpeningsupplies.com
Industry: Retail

Name: Wingra Direct, LLC
norm: wingra direct
Domain: sharpeningsupplies.com
Industry: Retail
Industry: Retail & Consumerllm

Discovered: Apr 21, 2023
Breach occurred: Apr 18, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 9, 2023
Affected individuals: 4state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Updated the SharpeningSupplies.com website to remove the threat
Provided notice to affected individuals through this letter
Provided complimentary identity theft services through IDX, a ZeroFox Company
Took additional actions to improve and monitor the security of the website
Changes made: Updated the SharpeningSupplies.com website to remove the threat
Took additional actions to improve and monitor the security of the website
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMay 9 · first

Massachusetts State AGMay 9 · first

Maine State AGMay 9 · first

Montana State AGMay 9 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-257.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 9, 2023
Raw hash: 699fe06da78b5e775ae8921bac16c94aa82803b357b413439ab3ff0b0402576d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWingra Direct, LLC

Victim entityWingra Direct, LLC

Incidentdiscovered Apr 21, 2023

Stated responseUpdated the SharpeningSupplies.com website to remove the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov