Blade HQ
bd_f6e497d7bc576b25 · schema v1 · pii pii-v1
Full breach record for Blade HQ →Blade HQ, LLC, an online retailer of outdoor equipment, disclosed a security incident in New Hampshire affecting 651 state residents. Unauthorized parties gained access to the company's hosted server infrastructure, likely via a compromised admin account, and uploaded malicious JavaScript code to perform credit card transaction skimming. The malicious code existed from approximately January 7, 2021, to March 22, 2021, and briefly on April 11, 2021. Affected data included customer names, addresses, email addresses, credit card numbers, expiration dates, and CVV codes. The company engaged a forensic firm, patched vulnerabilities, migrated to a secure server, and implemented new security measures. Notifications to affected customers began on April 20, 2021.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 7, 2021
Begins
Mar 18, 2021
Discovered
Apr 19, 2021
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- Oregon State AGbd_4de597f4ac5ffcf42021-04-19Candidate
- South Carolina State AGbd_58df914043b255af2021-04-19Verified
- California State AGbd_8a34f4aeb2a21f7e2021-04-19Verified
- Washington State AGbd_981135236a66aab22021-04-19Verified
Show 4 more filings ↓Show fewer ↑up to 5d gap
- Montana State AGbd_a449fbb90cda4b3e2021-04-20 · +1dVerified
- Maine State AGbd_bf35a6f255d2a15b2021-04-20 · +1dVerified
- Indiana State AGbd_2fbaeb6b51b0a4392021-04-21 · +2dVerified
- Massachusetts State AGbd_be5281510a50cdea2021-04-24 · +5dVerified
Filing propagation · 9 filings · 9 states
View merged incident ↗Pattern: first filing Apr 19 (OR), last Apr 24 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.