HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

Living Naturally, LLC

bd_d7652acda4a197e5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 30, 2010

Filed

Dec 31, 2010

To disclose

9 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

62%

Living Naturally, LLC notified the NH Attorney General that an online attacker gained unauthorized access to a customer database on October 30, 2010. Compromised data included names, addresses, and credit card information for customers of merchants hosted by Living Naturally. Notifications to consumers were scheduled for January 5, 2011.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 62 days

Oct 30, 2010

Begins

Oct 30, 2010

Discovered

Dec 31, 2010

Filed

vs. sector median

10 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_481af42a96dded142011-01-05 · +5dVerified

Name: Living Naturally, LLC
norm: living naturally
Domain: livenaturallycompany.com

Name: Living Naturally, LLC
norm: living naturally
Domain: livenaturallycompany.com
Industry: Technologyllm

Discovered: Oct 30, 2010
Breach occurred: Oct 30, 2010
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 5, 2011
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Working diligently to investigate the unauthorized activity and remediate the method of unauthorized access
Notified the credit card companies and have provided them with the affected credit card numbers
Contacted each of the affected merchants and are working with them to ensure the appropriate notifications are made to affected consumers
Changes made: Remediate the method of unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGDec 31 · first · this page

Massachusetts State AG+5d

Pattern: first filing Dec 31 (NH), last Jan 5 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/living-naturally-20101231.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 31, 2010
Raw hash: 31e0aa6961dc384f032db2182cbd31cddaa0b3bcd397aaae83acb6acc9805c79

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLiving Naturally, LLC

Victim entityLiving Naturally, LLC

Incidentdiscovered Oct 30, 2010

Stated responseWorking diligently to investigate the unauthorized activity and remediate the method of unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov