Vermont Christmas Company
ent_29879b8ef2dfed0eae108844
Disclosures
5
State AG · 5 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
12,533
as filed · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Vermont Christmas Company
- Normalized
- vermont christmas— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- vermontchristmasco.com
Disclosure history (5)newest first
- 🍁Vermont State AGas victim2023-08-09
Vermont Christmas Company notified consumers of a data breach involving its third-party e-commerce vendor, CommerceV3. Unauthorized access occurred between Nov 2021 and Dec 2022. Impacted data included names, billing addresses, emails, payment card numbers, CVVs, and expiration dates. CommerceV3 implemented additional security measures and notified law enforcement. Vermont Christmas Company is reviewing vendor procedures and notifying regulators.
- 🦬Montana State AGas victim2023-08-09
Vermont Christmas Company reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-09. The breach occurred from 11/24/2021 to 12/14/2022. 64 Montana residents were affected.
- 🐻California State AGas victim2023-08-09
Vermont Christmas Company notified customers of unauthorized access to its third-party vendor, CommerceV3, between Nov 24, 2021, and Dec 14, 2022. Potentially impacted data includes name, billing address, email, payment card number, CVV, and expiration date. The company is reviewing vendor procedures and notifying regulators.
- ⛰️New Hampshire State AGas victim2023-08-09
Vermont Christmas Company notified New Hampshire AG of a third-party vendor breach involving CommerceV3. Unauthorized access to CommerceV3 systems occurred between Nov 24, 2021 and Dec 14, 2022. Cardholder information was potentially impacted. VCC is reviewing vendor policies and notifying regulators. No specific count of affected individuals was disclosed in this filing.
- 🦞Maine State AGas victim2023-08-09
Vermont Christmas Company reported a third-party vendor incident on 11/24/2021, discovered on 06/08/2023. 12,533 individuals were affected, including 152 Maine residents. The breach involved names and financial account/credit card numbers. Written notification was sent on 08/09/2023.