HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPCIFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
Barton Cotton Religious Products & Services, LLC
bd_d8d8878928d9952e · schema v1 · pii pii-v1
Full breach record for Barton Cotton Religious Products & Services, LLC →Barton Cotton Religious Products & Services, LLC reported a third-party vendor breach involving CommerceV3, Inc. Unauthorized access occurred between Nov 24, 2021 and Dec 14, 2022. CommerceV3 detected the incident and notified Barton Cotton on May 3, 2023. Cardholder data and potentially PII of 17 New Hampshire residents were compromised. Notifications were sent on June 30, 2023.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d341c6c6098367b4Maine State AGfiled 2023-07-02(5d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/barton-cotton-religious-products-services-20230707.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2023
- Raw hash
- c764a5bd22cf86d14696f381a22e5cd29bac21df98851a254dd019a02a13ddbb
Reporting entity
- Name
- Barton Cotton Religious Products & Services, LLCnorm: barton cotton religious products
Victim entity
- Name
- Barton Cotton Religious Products & Services, LLCnorm: barton cotton religious products
Incident
- Discovered
- May 3, 2023
- Materiality determined
- —
- Notification sent
- Jun 30, 2023
- Affected individuals
- 17
- Data types
- PCIFINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed Notice of Vendor Data Security Incident with New Hampshire Attorney General Consumer Protection Bureau
- Third party
- via CommerceV3, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.