Flinn Scientific, Inc.

Flinn Scientific, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-10-02. 74 Massachusetts residents were affected. The report records the breach type as electronic.

Flinn Scientific, Inc. disclosed that a cyber-attacker used malware to gain access to its internet store server between May 2 and September 8, 2014. The attacker intercepted payment card information, including card numbers, verification codes, expiration dates, names, addresses, and email addresses. The company discovered the breach on September 8, 2014, eliminated the malware, and blocked further access. Affected customers were offered 12 months of credit monitoring services through AllClear ID.

Flinn Scientific, Inc. notified the NH AG of a security event where malware allowed an attacker to intercept payment card data (numbers, CVV, expiration, names, addresses, emails) for customers who purchased between May 2 and Sept 8, 2014. 28 NH residents affected. Discovered Sept 8, 2014. Notices sent Oct 2, 2014. Remediation included malware removal and enhanced security.