Bulletproof 360, Inc.

ent_b37bd092fa53093bf2939b08

Compliance scorecard →View in feed →

Disclosures

State AG · 6 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

35,716

nationwide · State AG OR

Leak-site claims

none in sample

Identity resolution

Canonical name: Bulletproof 360, Inc.
Normalized: bulletproof 360— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: bulletproof.com

Disclosure history (13)newest first

New Hampshire State AGas victim2017-11-27
Bulletproof 360, Inc. notified the NH Attorney General of a supplemental breach affecting 167 NH residents. Unauthorized code on its e-commerce checkout page captured names, addresses, emails, and full payment card details (including CVV) between Oct 2016 and Oct 2017. Notification sent Nov 27, 2017. Remediation included new security platform and SIEM.
Massachusetts State AGas victim2017-11-27
Bulletproof 360, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-11-27. 785 Massachusetts residents were affected. The report records the breach type as electronic.
California State AGas victim2017-11-27
Bulletproof 360, Inc. disclosed a data breach involving unauthorized code (skimmer) added to its website checkout page. The code captured payment card information (names, addresses, emails, card numbers, expiration dates, CVVs) from May 20, 2017, through October 19, 2017. The company discovered the code in mid-October 2017, removed it, and engaged forensic investigators and law enforcement. Notifications were sent to affected customers in November 2017.
Washington State AGas victim2017-11-27
Bulletproof 360, Inc. filed a supplemental breach notification with the Washington AG regarding unauthorized access to its e-commerce checkout page. Unauthorized code captured customer PII and payment card data (names, addresses, emails, card numbers, CVVs) between Oct 2016 and Oct 2017. 4,077 Washington residents were notified. The company engaged forensic firms, notified law enforcement, and implemented enhanced security controls.
California State AGas victim2017-09-15
Bulletproof 360, Inc. disclosed that an unknown third party compromised its e-commerce system, potentially affecting customer payment card information (name, card number, expiration date, CVV) from October 26, 2016, through May 30, 2017, and again from August 28, 2017, through September 5, 2017. The company engaged a security firm, notified law enforcement, and removed unauthorized code inserted into the checkout page.
New Hampshire State AGas victim2017-09-15
Bulletproof 360, Inc. filed a supplemental notice with the NH Attorney General regarding a compromise of its e-commerce website. Unauthorized code was inserted to capture payment card data (names, card numbers, CVVs) from Oct 26, 2016 through Sep 5, 2017. 184 NH residents are affected. Notifications began Sep 15, 2017. Security firm engaged; law enforcement notified.
Oregon State AGas victim2017-09-15
Bulletproof 360, Inc reported a data breach to the Oregon Attorney General. The breach was reported on 2017-09-15. The breach occurred during 10/26/2016 - 5/30/2017, 8/28/2017 - 9/5/2017. The breach was discovered on 2/23/20178/1/20179/5/2017. 35,716 individuals were affected. Notice was sent on 3/21/20179/15/2017.
Massachusetts State AGas victim2017-09-15
Bulletproof 360, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-09-15. 810 Massachusetts residents were affected. The report records the breach type as electronic.
Massachusetts State AGas victim2017-03-21
BulletProof 360, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-03-21. 557 Massachusetts residents were affected. The report records the breach type as electronic.
Montana State AGas victim2017-03-21
Bulletproof 360, Inc. notified Montana residents of a breach affecting customer payment card information (name, card number, expiration, CVV) from transactions between Oct 26, 2016 and Jan 31, 2017. The company discovered the incident on Feb 23, 2017, engaged a security firm, and notified law enforcement.
Oregon State AGas victim2017-03-21
Bulletproof 360, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2017-03-21. The breach occurred during 10/26/2016 - 1/31/2017. The breach was discovered on 2/23/2017. 28,033 individuals were affected. Notice was sent on 3/21/2017.
New Hampshire State AGas victim2017-03-21
Bulletproof 360, Inc. notified the NH Attorney General of a security incident affecting 120 NH residents. Unauthorized access to its e-commerce system occurred between Oct 26, 2016 and Jan 31, 2017, compromising names, payment card numbers, expiration dates, and CVVs. The breach was discovered on Feb 23, 2017. Notifications were mailed on March 21, 2017.
California State AGas victim2017-03-21
Bulletproof 360, Inc. disclosed that an unknown third party compromised its e-commerce system between October 26, 2016, and January 31, 2017. The incident potentially affected customer payment card information, including names, payment card numbers, expiration dates, and CVV numbers. The company engaged a security firm and notified law enforcement. No specific count of affected individuals was disclosed in the sample notice.