Tool-Flo
ent_4118b552923e98934ffc0c54
Disclosures
2
State AG · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
660
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Tool-Flo
- Normalized
- tool flo— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- Maine State AGas victim2023-12-15
Tool-Flo experienced an external system breach on November 16, 2023, which was discovered the same day. The breach affected 660 individuals, including 7 Maine residents. Affected individuals were notified electronically on December 6, 2023.
- New Hampshire State AGas victim2023-12-14
Tool-Flo notified the NH Attorney General of a third-party data breach involving SignatureIT Ltd., an e-commerce platform provider. On November 16, 2023, SignatureIT detected unusual activity, including a suspicious email, which served as the probable penetration point via their Confluence collaboration platform. Tool-Flo's own systems were not accessed. Approximately 2 New Hampshire residents may have had personal information compromised. Tool-Flo notified affected users, regulators (FBI, CISA, EU GDPR), and credit bureaus.
Supply-chain cascadesreviewed and confirmed
- Tool-Flo’s filing is one of at least 7 in the SignatureIT Ltd. supply-chain incident (2023).