Dollar Shave Club, Inc. notified the New Hampshire Attorney General of a credential-stuffing incident affecting 7 NH residents. Between May 26 and June 13, 2018, unauthorized actors used stolen email/password combinations to access customer accounts, view PII (name, address, email, phone), and purchase e-gift cards using hashed payment card data (last 4 digits only). The company disabled accounts, reset passwords, refunded purchases, voided codes, blocked IPs, and filed an FBI IC3 complaint.
Affected (this filing): 7