Pentel world.com
bd_f6d59a7e13766dd7 · schema v1 · pii pii-v1
Full breach record for Pentel world.com →Pentel of America, Ltd. reported a cybersecurity incident involving its online retail outlet (www.pentelstore.com). Unidentified actors gained unauthorized access between December 11, 2008, and January 20, 2009, accessing personal data of online shoppers, including names, billing addresses, email addresses, phone numbers, credit card numbers, expiration dates, and CV2 codes. An estimated 2,076 individuals were affected, including 7 New Hampshire residents. Pentel notified the New Hampshire Attorney General, engaged law enforcement (Grapevine PD and U.S. Secret Service), retained Kroll Inc. for credit monitoring services, and mailed notification letters to affected individuals starting February 19, 2009.
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pentel-america-20090303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2009
- Raw hash
- ff1bebfc51695abeff8ff114de386513bc2d50e7ad1ea984ec2bb4769cd2135f
Reporting entity
- Name
- Pentel world.comnorm: pentel worldcom
- Domain
- pentelworld.com
Victim entity
- Name
- Pentel world.comnorm: pentel worldcom
- Domain
- pentelworld.com
Incident
- Discovered
- Jan 20, 2009
- Materiality determined
- —
- Notification sent
- Feb 19, 2009
- Affected individuals
- 2,076
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Office of the Attorney General, Consumer Protection and Antitrust Bureau of New HampshireReferred the case to the Network Intrusion Division of the U.S. Secret Service Cyber Crimes Unit
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.