Nashbar Direct, Inc. notified the New Hampshire Attorney General of a data breach affecting 1,307 state residents. Unauthorized access to previous website servers occurred starting in December 2008 and was confirmed on May 18, 2009. The incident exposed customer names, addresses, emails, passwords, and credit/debit card information. Nashbar took the site offline, migrated to a new host, engaged forensic experts, and notified payment networks and federal law enforcement.
Affected (this filing): 1,307