HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

Handi Quilter

bd_fa9841f70febb2f6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 29, 2021

Filed

Jun 29, 2021

To disclose

9 weeks

Affected

48state residents only

Linked

5 filings

Confidence

66%

Full breach record for Handi Quilter →2 incidents on file

Handi Quilter, Inc. notified Montana residents of a data security incident where its website was compromised between March 24, 2020, and April 29, 2021. Unauthorized access may have exposed names, credit/debit card numbers, expiration dates, and security codes. The company conducted an internal investigation, enhanced security scans, and offered 12 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 401 days

discovery → filing · 9 weeks / 61 days

Mar 24, 2020

Begins

Apr 29, 2021

Discovered

Jun 29, 2021

Filed

vs. sector median

+1 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_4ff0a3b258031b692021-06-29Verified
Massachusetts State AGbd_d827c4f81390ae882021-06-29Verified
Maine State AGbd_db8b1ef4caf397ef2021-06-29Candidate
New Hampshire State AGbd_639c746a3072df212021-07-02 · +3dVerified

Name: Handi Quilter
norm: handi quilter
Domain: handiquilter.com

Name: Handi Quilter
norm: handi quilter
Domain: handiquilter.com
Industry: Retail & Consumerllm

Discovered: Apr 29, 2021
Breach occurred: Mar 24, 2020 – Apr 29, 2021
Undetected for: 401 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 48state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Conducted an internal investigation
Took steps to contain the incident
Enhanced payment card security beyond our daily security scans of the website
Implemented new security measures to prevent the reoccurrence of such an attack
Arranged for you to enroll, at no cost to you, in an online credit monitoring service (myTrueIdentity) for twelve (12) months provided by TransUnion Interactive
Changes made: Enhanced payment card security beyond our daily security scans of the website
Implemented new security measures to prevent the reoccurrence of such an attack
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJun 29 · first

Massachusetts State AGJun 29 · first

Maine State AGJun 29 · first

Montana State AGJun 29 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-35.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2021
Raw hash: 9be938da11a6561fa22fff6b13b426b59f4462376440c70e8729f638bb070f56

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityHandi Quilter

Victim entityHandi Quilter

Incidentdiscovered Apr 29, 2021

Stated responseConducted an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov