Clustered 5 filings across 5 jurisdictions · filing window Nov 27, 2024 → Dec 9, 2024. View entity profile → Other incidents for this victim →
incident inc_b0da562d459a427b · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
IN ME MT NH VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Oct 15, 2024
When the intrusion reportedly occurred, per the linked filings
Nov 8, 2024
Reported by MAINE AG, VERMONT AG, NEW HAMPSHIRE AG filings
STC Holdings LLC reported a data breach to the Montana Attorney General. The breach was reported on 2024-11-27. The breach occurred from 10/15/2024 to 11/07/2024. 18 Montana residents were affected.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 18
STC Holdings LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-15 and was reported on 2024-11-27. 53 Indiana residents were affected. 2,334 individuals affected in total.
Affected (this filing): 2,334
STC Holdings LLC reported a data breach affecting 5 Maine residents. The incident occurred on October 15, 2024, and was discovered on November 8, 2024. The company notified the affected individuals on November 27, 2024. The specific cause of the breach and the types of data involved were not specified in the public disclosure.
Affected (this filing): 5
STC Holdings (via TobaccoPipes.com) notified consumers of a data breach caused by a compromised third-party application (FreshClick) on its BigCommerce platform. The incident, occurring between Oct 15 and Nov 7, 2024, involved skimming of credit card information. STC Holdings uninstalled the app, secured systems, and engaged forensic investigators.
STC Holdings LLC notified the NH Attorney General of a security incident involving its ecommerce site TobaccoPipes.com. A third-party app (FreshClick via BigCommerce) was compromised, allowing a malicious actor to skim credit card data from shoppers between Oct 15 and Nov 7, 2024. STC was notified on Nov 8, 2024. 10 NH residents were affected. STC removed the app, secured systems, and engaged forensic investigators.
Affected (this filing): 10