HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
The National Wildlife Federation
bd_e850d4465859eee1 · schema v1 · pii pii-v1
Full breach record for The National Wildlife Federation →The National Wildlife Federation notified South Carolina (and other states) that malicious code on Zoobooks.com compromised payment card data (name, address, card number, CVV) for customers between Feb 2019 and Dec 2020. Forensic specialists were retained. 319 Rhode Island residents were impacted; total count undisclosed.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_53218a1414a3fef4Washington State AGfiled 2021-03-24Candidate
- bd_616fbe76043ab38aCalifornia State AGfiled 2021-03-24Verified
- bd_b39ba2952a25d8d0Maine State AGfiled 2021-03-24Verified
- bd_ddb6c4675f8bd76cOregon State AGfiled 2021-03-24Verified
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/NationalWildlifeFederation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2021
- Raw hash
- 7d1587cf2eef481ea37d4985f3ec86696b84f2fcd9cb5a2bddaf61d8c3f4a422
Reporting entity
- Name
- The National Wildlife Federationnorm: the national wildlife federation
Victim entity
- Name
- The National Wildlife Federationnorm: the national wildlife federation
Incident
- Discovered
- Jan 8, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.