GPD Holdings LLC
ent_3971d7b7f0d9586f21aea1a5
Disclosures
7
State AG · 6 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
36,646
as filed · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- GPD Holdings LLC
- Normalized
- gpd holdings— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- ⛰️New Hampshire State AGas victim2024-01-09
Supplemental notice from GPD Holdings, LLC d/b/a CoinFlip to the New Hampshire Attorney General. The initial notice (Oct 24, 2023) estimated 10 NH residents affected; updated analysis confirms 13 NH residents. Incident details, specific data types, and discovery dates are not provided in this update.
- 🦫Oregon State AGas victim2023-10-24
GPD Holdings LLC d/b/a CoinFlip reported a data breach to the Oregon Attorney General. The breach was reported on 2023-10-24. The breach occurred during 8/7/2023 - 8/8/2023. The breach was discovered on 9/21/2023. 36,646 individuals were affected. Notice was sent on 10/20/2023.
- ⛰️New Hampshire State AGas victim2023-10-24
GPD Holdings, LLC d/b/a CoinFlip reported a data breach affecting approximately 3,500 individuals. The incident involved the compromise of an employee's email account via a phishing attack, leading to the unauthorized access and exfiltration of customer data, including names, addresses, and payment card information. The company engaged forensic investigators and law enforcement, reset credentials, and notified affected consumers.
- 🦞Maine State AGas victim2023-10-24
GPD Holdings LLC, doing business as CoinFlip, experienced an external system breach from August 7 to August 8, 2023. The incident was discovered on September 21, 2023. The breach affected 36,646 individuals, compromising their names and driver's license or non-driver identification card numbers. Affected individuals were notified on October 20, 2023.
- 🐻California State AGas victim2023-10-23
On August 7, 2023, an unauthorized third party used social engineering to compromise a CoinFlip employee account, gaining access to systems for less than one day. CoinFlip discovered the incident on August 8, 2023, and contained it immediately. The investigation concluded on September 21, 2023. Affected data may include full name, tax identification number (SSN), date of birth, and driver's license or passport numbers. CoinFlip enhanced MFA and monitoring, and offered 12 months of credit monitoring via Equifax.
- 🍁Vermont State AGas victim2023-10-20
GPD Holdings LLC d/b/a CoinFlip notified consumers of a security incident where an unauthorized third party accessed systems via social engineering on August 7, 2023. The incident may have exposed names, dates of birth, and government IDs. CoinFlip enhanced MFA and monitoring.
- 🦬Montana State AGas victim2023-10-20
GPD Holdings d/b/a CoinFlip reported a data breach to the Montana Attorney General. The breach was reported on 2023-10-20. The breach occurred from 8/7/2023 to 8/8/2023. 99 Montana residents were affected.