HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountAuthenticationLowContained

Greenworks Tools

bd_d741c6501b9eb004 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 3, 2020

Filed

Sep 23, 2020

To disclose

16 weeks

Affected

109state residents only

Linked

7 filings

Confidence

66%

Full breach record for Greenworks Tools →3 incidents on file

Greenworks Tools notified the NH AG of a cyber-attack on its e-commerce site affecting 109 NH residents. Unauthorized access occurred between July 14, 2019, and June 30, 2020, compromising names, addresses, CVVs, expiration dates, and credit/debit card numbers. Greenworks engaged forensic investigators, removed malicious code, and notified affected individuals on September 17, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 325 days

discovery → filing · 16 weeks / 112 days

Jul 14, 2019

Begins

Jun 3, 2020

Discovered

Sep 23, 2020

Filed

vs. sector median

+8 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_5fb4765277810acc2020-09-17 · +6dVerified
Maine State AGbd_62133428ec6bf76e2020-09-17 · +6dVerified
Washington State AGbd_7a4ffa35717487c62020-09-17 · +6dVerified
California State AGbd_877fd6b0cfd408d72020-09-17 · +6dVerified

Show 2 more filings ↓up to 85d gap

Massachusetts State AGbd_a894aa39a71b87f22020-09-17 · +6dVerified
Montana State AGbd_b4cfeecddea9ecd62020-06-30 · +85dCandidate

Name: Greenworks Tools
norm: greenworks tools
Domain: greenworkstools.com

Name: Greenworks Tools
norm: greenworks tools
Domain: greenworkstools.com
Industry: Retail & Consumerllm

Discovered: Jun 3, 2020
Breach occurred: Jul 14, 2019 – Jun 30, 2020
Undetected for: 325 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 17, 2020
Affected individuals: 109state-resident count only
Data types: Identity (basic)Financial accountAuthentication
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Began working with third-party forensic investigators
Implemented additional procedures to further protect the security of customer debit and credit card information
Located the code responsible for the credit card/debit card compromise and has since removed the code from its e-commerce website
Changes made: Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Advising individuals to report any suspected incidents of identity theft or fraud to their credit card company and/or bank
Providing individuals with information on how to place a fraud alert and security freeze on one's credit file
Providing individuals with information on how to obtain a free credit report
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Montana State AGJun 30 · first

Indiana State AG+79d

Maine State AG+79d

Washington State AG+79d

California State AG+79d

Massachusetts State AG+79d

New Hampshire State AG+85d · this page

Pattern: first filing Jun 30 (MT), last Sep 23 (NH) — a 85-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/greenworks-tools-20200923.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 23, 2020
Raw hash: 9eb23441ae06066f3d306d8d12a2fd18b09a1e139612a99ce1bd52264fe5b869

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityGreenworks Tools

Victim entityGreenworks Tools

Incidentdiscovered Jun 3, 2020

Stated responseBegan working with third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov