HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained

Betterdoor.com

bd_ff8fd619bd94a909 · schema v1 · pii pii-v1

Betterdoor.com disclosed a security incident involving its e-commerce platform. Unauthorized code was added to the website after July 30, 2023, and identified/removed on November 22, 2024. The code may have captured checkout information, including names and payment card details. The company implemented additional security measures.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

bd_1fe26712649dd5bdNew Hampshire State AGfiled 2024-12-31Verified
bd_27adaef32e300983Vermont State AGfiled 2024-12-31Verified
bd_ae400b6021c091deMontana State AGfiled 2024-12-31Verified
bd_cc8d151de9eddae7Indiana State AGfiled 2024-12-31Verified

Show 1 more filing ↓

bd_f6e2d5faac76063bMaine State AGfiled 2024-12-31Candidate

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-596806
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 31, 2024
Raw hash: 5418c11347479b06ea46d3075bd2850b2a2ac013abaf3eb0b15e64917a145d76

Reporting entity

Name: Betterdoor.com
norm: betterdoorcom
Domain: betterdoor.com

Victim entity

Name: Betterdoor.com
norm: betterdoorcom
Domain: betterdoor.com

Incident

Discovered: Nov 22, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICFINANCIAL_ACCOUNT
Attack vector: Unknown
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

Compliance

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.