The NOCO Company

The NOCO Company identified malicious code on its website (no.co) on March 23, 2021, which allowed an unauthorized party to access payment card information, names, usernames, and passwords of customers who made purchases between October 8, 2019, and March 23, 2021. The company removed the code, engaged a cybersecurity firm, reset passwords, and implemented additional security controls.

The NOCO Company notified customers that an unauthorized party accessed payment card information, names, usernames, and passwords entered on its website between Oct 2019 and March 2021. The company removed malicious code, engaged a cybersecurity firm, and updated passwords.

The NOCO Company reported a data breach to the Indiana Attorney General. The breach occurred on 2020-10-08 and was reported on 2021-05-18. 104 Indiana residents were affected. 5,743 individuals affected in total.

The NOCO Company notified the New Hampshire Attorney General of a security incident involving 42 NH residents. Malicious code on noco.com allowed unauthorized copying of names, usernames, passwords, and credit/debit card numbers between Oct 8, 2019, and March 23, 2021. NOCO removed the code, engaged forensic investigators, and began mailing notifications on May 18, 2021.

The NOCO Company experienced an external system breach (hacking) that occurred between October 8, 2019, and March 23, 2021. The breach was discovered on April 15, 2021. The incident resulted in the compromise of names and financial account or credit/debit card numbers, including security codes, for 5,743 individuals, including 24 residents of Maine. Affected individuals were notified on May 18, 2021.

The NOCO Company reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-05-18. 154 Massachusetts residents were affected. The report records the breach type as electronic.