HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

First Aid Beauty

bd_db3165362653ad5b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 8, 2019

To disclose

—

Affected

59state residents only

Linked

5 filings

Confidence

65%

Full breach record for First Aid Beauty →

First Aid Beauty notified Montana of a data breach affecting customers who purchased from firstaidbeauty.com between April 15 and October 25, 2019. An unauthorized party placed malicious code on the site to capture names, addresses, and payment card details. The site was taken offline, forensic experts engaged, and credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 15, 2019

Begins

Nov 8, 2019

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_615fc4de84c079222019-11-08Candidate
Massachusetts State AGbd_97292813f8a3c8f82019-11-08Verified
California State AGbd_da211918bbf1b9ac2019-11-08Verified
Washington State AGbd_f8a5c17831a5c8b32019-11-08Verified

Name: First Aid Beauty
norm: first aid beauty
Domain: firstaidbeauty.com

Name: First Aid Beauty
norm: first aid beauty
Domain: firstaidbeauty.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Apr 15, 2019 – Oct 25, 2019
Materiality determined: —
Notification sent: Nov 8, 2019
Affected individuals: 59state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Took firstaidbeauty.com offline
Blocked the malicious code
Engaged a leading data security expert to investigate the matter
Removed the malicious code
Offered identity protection and credit monitoring services for one year at no cost
Changes made: Removed malicious code from website
Implemented measures to ensure this does not happen again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Oregon State AGNov 8 · first

Massachusetts State AGNov 8 · first

California State AGNov 8 · first

Washington State AGNov 8 · first

Montana State AGNov 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-Notification-Details-7.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 8, 2019
Raw hash: 268cdbc7992b59a29982ffe748c0214f933ca9c7c529fa98698fb053e0ae4227

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFirst Aid Beauty

Victim entityFirst Aid Beauty

IncidentUnauthorized Access

Stated responseTook firstaidbeauty.com offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov