norm: neometalUSno LEI · no CIKMax severity: Low

Canonical registry

NeoMetal, Inc.

ent_18cf46f12c7dc98d71305738

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

101

nationwide · State AG NH

Leak-site claims

0

none in sample

Identity resolution

Canonical name: NeoMetal, Inc.
Normalized: neometal— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

New Hampshire State AGas victim2026-10-19
NeoMetal, Inc. notified the NH AG of a security incident affecting 101 individuals (1 NH resident). Between Oct 14, 2026, 6:06 AM and 12:32 PM ET, a malicious script in a third-party Shopify app (Wishlist Plus by Swym Corp) redirected shoppers to a fake payment page, capturing card numbers, expiration dates, security codes, names, and billing addresses. The vendor discovered the issue on Oct 16, 2026. The script was removed, and the app was delisted from the Shopify App Store. Affected individuals were notified via email on Oct 19, 2026.