HackingStolen CredentialsSkimmerCustomer Data InvolvedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALSLowContained
Special Buys Clothing Inc.
bd_d002a3fd6a695621 · schema v1 · pii pii-v1
Full breach record for Special Buys Clothing Inc. →Special Buys Clothing Inc. (dba Bargain Balloons) notified NH AG of a data breach discovered Nov 7, 2022. Malicious code (skimmer) was inserted on the checkout page between Sep 27 and Nov 6, 2022, harvesting customer PII and credit card data. 15 NH residents affected. SBCI engaged forensic experts, removed code, and offered credit monitoring.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_7f2e9177a73a8535Montana State AGfiled 2022-12-13(1d gap)Verified
- bd_92d668249e35cf79Maine State AGfiled 2022-12-09(3d gap)Candidate
- bd_d39d671c575ae478California State AGfiled 2022-12-09(3d gap)Verified
- bd_e92b589788940062California State AGfiled 2023-01-19(38d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 49d gap
- bd_47ae83101c7c238cMaine State AGfiled 2023-01-20(39d gap)Verified
- bd_b7879b167a37cbd0New Hampshire State AGfiled 2023-01-30(49d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/special-buys-clothing-dba-bargain-balloons-20221212.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2022
- Raw hash
- fcf4370f2eac805b404d8363e1758eacd2ebd353713c4108fa2541e629fd039e
Reporting entity
- Name
- Special Buys Clothing Inc.norm: special buys clothing
Victim entity
- Name
- Special Buys Clothing Inc.norm: special buys clothing
Incident
- Discovered
- Nov 7, 2022
- Materiality determined
- —
- Notification sent
- Dec 12, 2022
- Affected individuals
- 15
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's OfficeReporting to local police and regulatory authorities in applicable jurisdictions
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.