CRICUT, INC.
ent_019de5f6df15203f44e078fef38d2c22
Disclosures
2
State AG · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
123
as filed · State AG MT
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CRICUT, INC.
- Normalized
- cricut— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900R3DKAJ28MC0Q39
- SEC EDGAR CIK
- 0001828962
- Domain
- cricut.com
Disclosure history (2)newest first
- California State AGas victim2017-10-06
Provo Craft & Novelty, Inc. (d/b/a Cricut) experienced a cyberattack on its online checkout page between May 27 and July 12, 2017. Malicious code (malware) was used to scrape payment card numbers, security codes, expiration dates, names, addresses, and contact information from customers. The company engaged forensic experts, notified law enforcement, removed the malware, and relaunched secure shopping pages. Affected customers were offered 12 months of identity theft protection.
- Montana State AGas victim2017-10-05
Cricut notified customers of a cyberattack on its checkout page (shop.cricut.com) between May 27 and July 12, 2017. Malware scraped payment card data, security codes, and personal information. Cricut engaged forensic experts, notified law enforcement, removed the malware, and relaunched pages with enhanced security. Affected individuals received 12 months of identity theft protection.