Aptos
ent_dc3183b60d0c6cb04175fc32
Disclosures
10
State AG · 4 jurisdictions
Multi-filing incidents
4
incidents joining 2+ filings here
Max affected reported
64,129
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Aptos
- Normalized
- aptos— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- aptos.com
Disclosure history (10)newest first
- New Hampshire State AGas reporting2017-08-24
Supplemental notice by Aptos on behalf of retailer PianoWorks, Inc. notifying 1 New Hampshire resident of a breach. Notification sent August 7, 2017. No specific attack vector or data types detailed in this supplemental filing.
- New Hampshire State AGas reporting2017-04-28
Supplemental state-AG notice filed by Aptos on behalf of retailer Marbles, LLC, notifying 712 New Hampshire consumers of a breach. Notification sent between April 19-25, 2017.
- New Hampshire State AGas reporting2017-04-04
Aptos submitted a supplemental notice to the New Hampshire Attorney General on April 4, 2017, regarding a breach affecting Tempur-Pedic. The notice covers 1,531 New Hampshire residents whose PII was compromised. This is a follow-up to a prior notice dated February 25, 2017.
- Oregon State AGas victim2017-03-24
Aptos, Inc reported a data breach to the Oregon Attorney General. The breach was reported on 2017-03-24. The breach occurred during 2/1/2016 - 12/31/2016. The breach was discovered on 11/15/2016.
- New Hampshire State AGas reporting2017-03-08
Aptos submitted an amended notification to the New Hampshire Attorney General regarding a breach affecting Atlantic Cigar. The filing corrects the number of notified consumers in NH to 178 and updates the notification date to on or about March 14, 2017. No PIN, CVV, or SSN data was exposed.
- New Hampshire State AGas victim2017-03-03
Aptos, Inc., an e-commerce platform provider, notified the New Hampshire Attorney General of a security incident involving malicious software (ransomware) on its systems. The intrusion occurred between February 2016 and December 2016, affecting customer demographic and payment card data (including CVV2) for 2,858 New Hampshire residents. Aptos reported the incident to the FBI and DOJ, engaged a cybersecurity firm to remove malware and strengthen access controls, and facilitated notification to affected retailers and consumers.
- Massachusetts State AGas victim2017-02-27
Aptos, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-02-27. 64,129 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2017-02-27
Aptos Inc., a third-party payment processing technology provider, experienced a malware-based data breach affecting 40 online retailers, including Mrs. Prindables. Unauthorized persons placed malware on Aptos' platform between February 2016 and December 2016. Aptos discovered the breach in November 2016 but delayed notification pending law enforcement investigation. Exposed data included names, addresses, emails, phone numbers, and payment card numbers with expiration dates. CVV codes were not exposed. Aptos engaged cybersecurity firms to remove malware, strengthened access controls, and offered credit monitoring to affected customers.
- New Hampshire State AGas victim2017-02-25
Aptos, Inc. notified the NH Attorney General of a remote access intrusion affecting online retailers' transaction data. The incident occurred Feb-Dec 2016, discovered Nov 2016. Data exposed included names, addresses, payment card numbers, and CVVs. 2,858 NH residents affected. Aptos engaged cybersecurity firm to remove malware and strengthen access controls.
- California State AGas victim2017-02-25
Aptos, Inc., a third-party e-commerce platform provider, experienced a malware intrusion between February and December 2016, discovered in November 2016. Attackers placed malware on Aptos servers, gaining access to customer payment card data (card numbers, expiration dates) and basic PII (name, address, phone, email) for approximately 10,000 clients, including Alpha Industries. Notification was delayed by law enforcement request. Aptos engaged forensic investigators, removed malware, and offered credit monitoring.
Supply-chain cascadesreviewed and confirmed
- Aptos supply-chain incident (2017)2017-02-25 – 2017-10-1312 organizations linked