DisclosureLens
HackingRetailCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumResolved

Barton Cotton Religious Products & Services, LLC

bd_d341c6c6098367b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2023

Filed

Jul 2, 2023

To disclose

26 days

Affected · nationwide

2,4827 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Barton Cotton Religious Products & Services, LLC →2 incidents on file

Barton Cotton Religious Products & Services, LLC reported a data breach affecting 7 Maine residents after an external system breach that occurred on November 24, 2021. The company discovered the breach on June 6, 2023, and notified affected consumers on June 30, 2023. The compromised information includes names and financial account numbers or credit/debit card numbers, along with their security codes, access codes, passwords, or PINs.

Maine clockDiscovered Jun 6, 2023 → Filed with AG Jul 2, 202326d ✓ ME AG ≤30d26 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 559 days
discovery → filing · 26 days

Nov 24, 2021

Begins

Jun 6, 2023

Discovered

Jul 2, 2023

Filed

This filing is one of 2 about the same incident.View merged incident
Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Maine State AGJul 2 · first · this page
New Hampshire State AG+5d

Pattern: first filing Jul 2 (ME), last Jul 7 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.