Totally Promotional
ent_7f7591d2fcd3665f8816c93b
Disclosures
14
State AG · 11 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
39,024
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Totally Promotional
- Normalized
- totally promotional— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (14)newest first
- California State AGas victim2024-11-25
Totally Promotional disclosed that an unauthorized actor placed code on its website's payment platform to capture customer payment card information. The incident occurred in multiple windows between November 20, 2023, and October 20, 2024. Suspicious activity was identified on July 10, 2024. The company removed the malicious code and reviewed policies. Affected data includes names and payment card information.
- South Carolina State AGas victim2024-10-17
Totally Promotional notified customers of a payment card skimming incident. Suspicious activity was identified on July 10, 2024. Unauthorized code captured payment card info between Nov 20, 2023 and July 11, 2024. The company removed the code and is notifying affected individuals.
- New Hampshire State AGas victim2024-10-16
Totally Promotional notified New Hampshire residents of a data breach involving payment card information. Suspicious activity was identified on July 10, 2024, involving unauthorized code placed on the website's payment platform between November 20, 2023, and July 18, 2024. The incident affected 155 New Hampshire residents. The company removed the malicious code and is providing fraud protection guidance.
- California State AGas victim2024-10-16
Totally Promotional experienced a data breach involving unauthorized code placed on its website's payment platform between November 20, 2023, and July 18, 2024. The code captured customer payment card information and names. The incident was discovered on July 10, 2024. The company removed the malicious code and adjusted policies. No specific count of affected individuals was disclosed in the notice, though Rhode Island residents were specifically mentioned.
- Vermont State AGas victim2024-10-16
Totally Promotional notified consumers of a data breach involving unauthorized code placed on its website payment platform. The incident occurred between November 20, 2023, and July 18, 2024, capturing names and payment card information. The company removed the malicious code and is notifying affected individuals and regulators.
- Washington State AGas victim2024-10-16
Supplemental notice from Totally Promotional regarding a data event affecting Washington residents. Unauthorized code placed on the website's payment platform captured customer payment card information between Nov 20, 2023 and Oct 20, 2024. This notice covers 1 additional resident notified on Nov 25, 2024. Total affected previously reported as 545.
- Maine State AGas victim2024-10-16
Totally Promotional experienced an external system breach (hacking) where an unauthorized actor placed code on its website's payment platform to capture customer payment card information and names. The incident affected 39,024 individuals, including 160 Maine residents. The breach occurred between November 20, 2023, and July 11, 2024. The company discovered the incident on September 13, 2024, and notified affected individuals on October 16, 2024.
- Oregon State AGas victim2024-10-16
Totally Promotional reported a data breach to the Oregon Attorney General. The breach was reported on 2024-10-16. The breach occurred during 11/20/2023 - 7/11/2024. The breach was discovered on 9/13/2024. 39,024 individuals were affected. Notice was sent on 10/16/2024.
- Montana State AGas victim2024-10-16
Totally Promotional notified customers of a payment platform compromise where unauthorized code captured payment card information. The incident occurred between November 20, 2023, and July 18, 2024. Suspicious activity was identified on July 10, 2024. The company removed the malicious code and is notifying affected individuals.
- Indiana State AGas victim2024-10-16
Totally Promotional reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-20 and was reported on 2024-10-16. 788 Indiana residents were affected. 39,024 individuals affected in total.
- Massachusetts State AGas victim2024-10-16
Totally Promotional reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-10-16. 724 Massachusetts residents were affected.
- Illinois State AGas victim2024-10-01
TOTALLY PROMOTIONAL filed a data-breach notice with the Illinois Attorney General in October 2024 (case 24-10-029). The register records the breach as discovered on November 20, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- New Hampshire State AGas victim2015-08-17
Totally Promotional notified the NH AG of a breach where unauthorized individuals accessed customer data between June 23 and July 10, 2015. Data included names, addresses, emails, and payment card details. Customers were notified starting August 13, 2015. The company engaged forensic investigators and secured the system.
- Massachusetts State AGas victim2015-07-30
Totally Promotional reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-07-30. 78 Massachusetts residents were affected. The report records the breach type as electronic.