HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Handi Quilter
bd_db8b1ef4caf397ef · schema v1 · pii pii-v1
Full breach record for Handi Quilter →Handi Quilter, Inc. reported an external system breach (hacking) occurring between March 24, 2020, and April 29, 2021, discovered on June 28, 2021. The incident affected 3,096 individuals, including 17 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The company provided 12 months of credit monitoring via Transunion and identity restoration assistance.
Maine clockDiscovered Jun 28, 2021 → Filed with AG Jun 29, 20211d ✓ ME AG ≤30d≤1 day discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fa9841f70febb2f6Montana State AGfiled 2021-06-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1a768d61-844c-4029-9731-33d6ea07bc19.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 29, 2021
- Raw hash
- 4bba55ec81284cee4df546170b878cbe1bcff7eb1155eabb3b857b9cee66dda6
Reporting entity
- Name
- Handi Quilternorm: handi quilter
- Domain
- handiquilter.com
Victim entity
- Name
- Handi Quilternorm: handi quilter
- Domain
- handiquilter.com
Incident
- Discovered
- Jun 28, 2021
- Materiality determined
- —
- Notification sent
- Jun 29, 2021
- Affected individuals
- 3,096
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- ≤1 day(1 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 1d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 28, 2021→ Filed with AG: Jun 29, 20211d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.