Bluestem Brands, Inc.

Bluestem Brands (Fingerhut/Gettington) filed a supplemental notice with NH AG regarding a data incident. Attackers used compromised credentials from third-party sites to access customer accounts between April 18-30, 2017. 11 NH residents affected. Data included names, addresses, emails, phone numbers, and credit account numbers. Bluestem blocked access, re-issued credit numbers, and notified customers.

Bluestem Brands, Inc. (via subsidiaries Gettington, Fingerhut, and PayCheck Direct) notified Montana residents of a data security incident where cyber-attackers attempted unauthorized access to customer accounts between March 24 and April 7, 2017. Accessed data included names, addresses, emails, phone numbers, and credit account numbers. Access was blocked and fraud holds placed.

Bluestem Brands, Inc. reported unauthorized access to customer accounts for Fingerhut, Gettington, and PayCheck Direct between March 24 and April 7, 2017. Affected data included names, addresses, emails, phone numbers, and credit account numbers. The company blocked web access and placed fraud holds on affected accounts.

Bluestem Brands, Inc. (d/b/a Fingerhut and Gettington) notified the New Hampshire Attorney General of a cyber-attack occurring between March 24 and April 7, 2017. The incident affected 62 New Hampshire residents, exposing names, addresses, emails, phone numbers, and credit account numbers. Bluestem blocked access, stopped purchases, and placed fraud holds on accounts. Notices were mailed on April 13, 2017.

Bluestem brands d/b/a Fingerhut, Gettington, and Paycheck Direct reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-04-06. 128 Massachusetts residents were affected. The report records the breach type as electronic.

Bluestem Brands, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-04-02. 6 Massachusetts residents were affected.