TwoBirch
bd_f3cbba6ac787a805 · schema v1 · pii pii-v1
Full breach record for TwoBirch →TwoBirch, a point-of-sale vendor, disclosed a data breach affecting 798 individuals, including 4 Maine residents. The breach, which occurred between February 18, 2020, and January 18, 2021, was discovered on January 8, 2021. The incident was described as an external system breach involving malicious code. The compromised information includes names in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified in writing on May 26, 2021. Identity theft protection services were not offered.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 18, 2020
Begins
Jan 8, 2021
Discovered
May 26, 2021
Filed
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- Massachusetts State AGbd_38712bb9f309bf2b2021-05-26Verified
- Indiana State AGbd_a3c58804539949112021-05-26Verified
- New Hampshire State AGbd_f3480485723803fd2021-06-01 · +6dVerified
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing May 26 (MA), last Jun 1 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.