This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 2915 To_xml

SUMMARY

Website breached by hacker through SQL injection - exposing personal information of customers
Records Unknown
Record Types CCN NAA
Breach Type Hack
Data Family Electronic
Source Outside
Organization HBDirect.com
Other Affected/Involved Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: pi3rce

TIMELINE

DateEvent
2009-12-01 Incident Occurred
2010-02-10 Incident Discovered By Organization
2010-03-24 Organization Reports Incident
2010-03-16 Organization Mails Notifications
None. Add Data Records Recovered
None. Add Data Lawsuit Filed
None. Add Data Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations
0 2000-12-23 Egghead.com
0 2001-06-21 ZixIt-Anacom, Anacom Communications
0 2001-11-20 Playboy
0 2004-03-19 BJ's Wholesale Club

MAP OF INCIDENT LOCATION

Address: Vermont, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

PRIMARY SOURCES

Primary Source ID: 2548

add details to this primary source Description
New Hampshire breach notification: HBDirect.com - Website hacked through SQL injection - exposing credit cards of customers from December 1, 2009 to February 10, 2010. 19 NH residents affected.
FilenameSourceResearcher Incident IDs
hbdirect.pdfNew Hampshire Consumer Protection & Antitrust Bureaukirniki <a href='/incidents/show/2915'>2915</a>
RecordsFile DateUploadedUpdated
19 2010-03-24 2010-04-08 08 Jun 10:27
Excerpt
2548

· i or t t " \.......... -»»m,—..»M......m..—mm—- AAA....................... mm March 18, 2GlG Dear Attorney General Kelly Ayotte: This letter is to inform you ofa privacy incident affecting r...

Click here for the Full Details | Download Raw PDF

COMMENTS

New Comment

captcha
Are you human?

Sponsored By: Credant_200x51 Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.