GPD Holdings LLC
ent_3971d7b7f0d9586f21aea1a5
Disclosures
10
State AG · 9 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
36,646
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- GPD Holdings LLC
- Normalized
- gpd holdings— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (10)newest first
- New Hampshire State AGas victim2024-01-09
GPD Holdings, LLC d/b/a CoinFlip reported a security incident where an unauthorized third party used social engineering to compromise an employee account on August 7, 2023. The incident affected personal information of 13 New Hampshire residents. CoinFlip contained the breach, engaged forensic consultants, and enhanced MFA and security monitoring.
- Oregon State AGas victim2023-10-24
GPD Holdings LLC d/b/a CoinFlip reported a data breach to the Oregon Attorney General. The breach was reported on 2023-10-24. The breach occurred during 8/7/2023 - 8/8/2023. The breach was discovered on 9/21/2023. 36,646 individuals were affected. Notice was sent on 10/20/2023.
- New Hampshire State AGas victim2023-10-24
GPD Holdings d/b/a CoinFlip notified the NH AG of a security incident on Oct 24, 2023. Unauthorized access occurred Aug 7, 2023, via social engineering compromising an employee account. Discovered Aug 8, 2023. Up to 10 NH residents' PII (names, contact info) potentially accessed. Notifications sent Oct 20, 2023. Forensic consultants retained; MFA and monitoring enhanced.
- Maine State AGas victim2023-10-24
GPD Holdings LLC, doing business as CoinFlip, experienced an external system breach from August 7 to August 8, 2023. The incident was discovered on September 21, 2023. The breach affected 36,646 individuals, compromising their names and driver's license or non-driver identification card numbers. Affected individuals were notified on October 20, 2023.
- Massachusetts State AGas victim2023-10-24
GPD Holdings LLC d/b/a CoinFlip reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-24. 588 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2023-10-23
On August 7, 2023, an unauthorized third party used social engineering to compromise a CoinFlip employee account, gaining access to systems for less than one day. CoinFlip discovered the incident on August 8, 2023, and contained it immediately. The investigation concluded on September 21, 2023. Affected data may include full name, tax identification number (SSN), date of birth, and driver's license or passport numbers. CoinFlip enhanced MFA and monitoring, and offered 12 months of credit monitoring via Equifax.
- Vermont State AGas victim2023-10-20
GPD Holdings LLC d/b/a CoinFlip notified consumers of a security incident where an unauthorized third party accessed systems via social engineering on August 7, 2023. The incident may have exposed names, dates of birth, and government IDs. CoinFlip enhanced MFA and monitoring.
- Indiana State AGas victim2023-10-20
GPD Holdings, LLC dba CoinFlip reported a data breach to the Indiana Attorney General. The breach occurred on 2023-08-27 and was reported on 2023-10-20. 1,076 Indiana residents were affected. 36,646 individuals affected in total.
- Montana State AGas victim2023-10-20
GPD Holdings d/b/a CoinFlip notified individuals of a security incident where an unauthorized third party accessed systems via social engineering on August 7, 2023. The attacker compromised an employee account, potentially accessing names, DOBs, and government IDs. CoinFlip contained the breach, engaged forensic consultants, and enhanced MFA.
- Illinois State AGas victim2023-01-01
GPD HOLDINGS LLC DBA. COINFLIP filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-726). The register records the breach as discovered on August 7, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.