HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Altern Marketing, LLC

bd_f0e7cc8c8ce8a7e0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 30, 2020

Filed

Dec 17, 2020

To disclose

7 weeks

Affected

44state residents only

Linked

2 filings

Confidence

66%

Full breach record for Altern Marketing, LLC →

Altern Marketing, LLC (and its subsidiaries) notified the NH Attorney General of a data breach involving third-party payment processor 1ShoppingCart. An unauthorized third party accessed 1ShoppingCart's systems between August 6 and August 22, 2020, potentially exposing NH residents' names, addresses, emails, and payment card details (including CVV). 44 NH residents were affected. Altern learned of the breach on October 30, 2020, and began notifying individuals on December 15, 2020.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 85 days

discovery → filing · 7 weeks / 48 days

Aug 6, 2020

Begins

Oct 30, 2020

Discovered

Dec 17, 2020

Filed

vs. sector median

1 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_bc7cd59bd2c63e7f2020-12-15 · +2dCandidate

Name: Altern Marketing, LLC
norm: altern marketing

Name: Altern Marketing, LLC
norm: altern marketing
Industry: Retail & Consumerllm

Discovered: Oct 30, 2020
Breach occurred: Aug 6, 2020 – Aug 22, 2020
Undetected for: 85 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 15, 2020
Affected individuals: 44state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Submitted notification to New Hampshire Attorney General pursuant to N.H. REV. STAT. ANN. § 359-C:20
Third party: via 1ShoppingCart
Initial access: supply_chain

During the incident: Requested 1ShoppingCart provide additional information about the incident
Requested 1ShoppingCart provide a list of individuals who may have been impacted
Working with 1ShoppingCart to obtain additional information about the nature of the event
Requested information about steps 1ShoppingCart has taken to ensure this type of incident does not occur in the future
Working with the PCI Council
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGDec 15 · first

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/altern-marketing-20201217.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 17, 2020
Raw hash: 8886994ef1c987a0d111b9e228afa2e51795b3c204b0399eedaab72036eaac96

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAltern Marketing, LLC

Victim entityAltern Marketing, LLC

Incidentdiscovered Oct 30, 2020

Stated responseRequested 1ShoppingCart provide additional information about the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov