CRICUT, INC.
ent_019de5f6df15203f44e078fef38d2c22
Disclosures
2
State AG · 2 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
123
as filed · State AG MT
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CRICUT, INC.
- Normalized
- cricut— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900R3DKAJ28MC0Q39
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- cricut.com
Disclosure history (2)newest first
- 🐻California State AGas victim2017-10-06
Provo Craft & Novelty, Inc. (d/b/a Cricut) disclosed a cyberattack on its shop.cricut.com checkout page between May 27 and July 12, 2017. Malware scraped customer payment card numbers, security codes, expiration dates, names, addresses, and contact information. The company engaged forensic experts, notified law enforcement, removed the malware, and relaunched the site with enhanced security. Affected customers were offered 12 months of free identity theft protection via ID Experts.
- 🦬Montana State AGas victim2017-10-05
Cricut reported a data breach to the Montana Attorney General. The breach was reported on 2017-10-05. The breach occurred from 5/27/2017 to 9/12/2017. 123 Montana residents were affected.