Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
American Freight, Inc.
bd_d9562de3112a3157 · schema v1 · pii pii-v1
Full breach record for American Freight, Inc. →American Freight, LLC notified the New Hampshire Attorney General of a security incident affecting 76 state residents. Unauthorized access to employee email accounts occurred between November 24 and December 9, 2020. The breach exposed names, SSNs, driver's license numbers, financial account numbers, and payment card numbers. Notification letters were mailed on August 23, 2021, offering one year of credit monitoring via Kroll.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_69906cce998d1c9cWashington State AGfiled 2021-08-23Candidate
- bd_7f6f2dfe3d01d6dcMontana State AGfiled 2021-08-23Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/american-freight-20210823.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2021
- Raw hash
- 2cf0d46afc83b8294308ab2eb81751dca698ae1ef2eba9896a593c635ff8bef7
Reporting entity
- Name
- Baker Law Groupnorm: baker law
- Domain
- jbakerlawgroup.com
Victim entity
- Name
- American Freight, Inc.norm: american freight
- Industry
- retail_consumer
Incident
- Discovered
- Jun 11, 2021
- Materiality determined
- —
- Notification sent
- Aug 23, 2021
- Affected individuals
- 76
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.