HackingManufacturingManufacturingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Financial accountPIILowActive

Bimba LLC

bd_ea7860d9f17e8c05 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 23, 2020

To disclose

—

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Bimba LLC →2 incidents on file

Bimba LLC notified customers of a data security incident involving its third-party hosting provider. Unauthorized users may have accessed customer PII and credit card data between August 21, 2020, and November 13, 2020, via malicious code inserted into web files. Bimba is investigating, remediating the vulnerability, and offering two years of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 21, 2020

Begins

Dec 23, 2020

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_4051af5c7c3e12f12020-12-28 · +5dVerified

Name: Bimba LLC
norm: bimba
Domain: bimba.com

Name: Bimba LLC
norm: bimba
Domain: bimba.com
Industry: Manufacturingllm

Discovered: —
Breach occurred: Aug 21, 2020 – Nov 13, 2020
Materiality determined: —
Notification sent: Dec 23, 2020
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial accountPII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Began an investigation
Took additional security measures to remediate the vulnerability
Asked our vendor for additional information
Conducting a thorough review of the potentially affected records
Create and implement additional security measures, internal controls, and safeguards
Make changes to existing policies and procedures
Working closely with payment card companies
Changes made: Remediate the vulnerability
Create and implement additional security measures, internal controls, and safeguards
Make changes to existing policies and procedures designed to prevent a similar occurrence
Offering you a complimentary two-year membership of Experian’s® IdentityWorksSM
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGDec 23 · first · this page

New Hampshire State AG+5d

Pattern: first filing Dec 23 (MT), last Dec 28 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/bimbaSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2020
Raw hash: ea9fe4a45e9375543b4dc4ba7586c999e2c35752b498dd9a3a911a9a81b4b9d3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBimba LLC

Victim entityBimba LLC

IncidentThird-Party / Supply Chain

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov