SignalAtlas
Partager une information
En cours d’enquête

360training (MEC): card data may have been sent to attacker via malicious website script

Possible data leak: Around November 25, 2025, MEC discovered suspicious activity on its website; on November 26 it found an unauthorised party had added a script sending credit card data to a Google Analytics account it controlled.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

Customers who bought courses on mortgageeducators.com during a limited window may be affected. Also filed with the Washington AG on the same day. Fields are templated; no total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked.

Chronologie

  1. Survenue
  2. Découverte
  3. Divulgation

Réponse de l’organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Que faire ?

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sources

  1. Sample consumer notice filed with California AG (360training.com, Inc.)California Department of Justice, Office of the Attorney General · 2026-11-09
  2. California AG data breach report: 360training.com, Inc.California Department of Justice, Office of the Attorney General · 2026-11-09

Informations associées

Partager une information

Aucune information publiée

Les informations apparaîtront après vérification ou modération.

Commentaires et réponses

Écrire un commentaire

Sans inscription. Les commentaires sont publiés immédiatement.

Ne publiez pas de noms privés, d’adresses, de mots de passe ou de codes. Le masquage automatique est limité : vérifiez avant l’envoi.