🍁Vermont State AGlinked via multistate filing link · 100%
Clustered 3 filings across 3 jurisdictions · filing window Apr 27, 2023 → Apr 29, 2023. View entity profile → Other incidents for this victim →
incident inc_600e3c8fad484699 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Identity (basic) · Financial account
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA ME VT
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
Sep 28, 2022 → Feb 27, 2023
When the intrusion reportedly occurred, per the linked filings
Feb 27, 2023
Reported by VERMONT AG, CALIFORNIA AG, MAINE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Indiana Oxygen Company (IOC) notified consumers of a data breach involving its eCommerce platform. Malicious code injected into the platform allowed unauthorized access to payment and personal information between September 28, 2022, and February 27, 2023. IOC engaged law enforcement and forensic specialists, removed the code, and is migrating to a more secure platform. Impacted data includes names, addresses, and credit/debit card details. No confirmed misuse was reported at the time of notice.
Welding Supplies from IOC, a subsidiary of Indiana Oxygen Company, experienced a data breach affecting its eCommerce platform. Malicious code injected into the platform allowed unauthorized access to consumer payment and personal information between September 28, 2022, and February 27, 2023. The incident was discovered on February 27, 2023, when IOC identified the malicious code. Affected data includes names, addresses, email, phone numbers, and credit/debit card information. IOC removed the code, engaged forensic specialists, and is migrating to a more secure eCommerce platform.
Welding Supplies from IOC, a subsidiary of Indiana Oxygen Company, reported a data breach caused by a website code injection. The incident occurred between September 28, 2022, and February 27, 2023, and was discovered on the end date. The breach compromised names and financial account numbers or credit/debit card numbers with their security codes. 51 Maine residents were affected.
Affected (this filing): 51