Numrich Gun Parts gunpartscorp.com Numrich Gun Parts data breach: what happened and what to do
Numrich Gun Parts told regulators that someone had access to its online store from January 23 to April 5, 2022. The Maine Attorney General's filing counts 45,169 people affected in total. Reporting says names and payment card details were involved.
View all 13,177 breaches- Breach date
- 23 Jan 2022
- Made public
- 6 Jun 2022
- Affected
- 45,169
- Data exposed
- Names, Credit cards
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Numrich Gun Parts, a US seller of firearm parts, sent breach notices in June 2022. Its letter says the company noticed suspicious activity on its online store, gunpartscorp.com, on or about March 28, 2022. The investigation found that an unknown party had access to the site between January 23 and April 5, 2022, when the company removed that access.
The Maine Attorney General's filing lists 45,169 people affected in total, including 317 Maine residents, and shows a discovery date of May 12, 2022. Reporting on the incident describes it as card skimming, where malicious code on a checkout page copies what shoppers type.
Sources checked: maine.gov, oag.ca.gov, consumer.ftc.gov
Last verified against the official page:
What was exposed
Per the reporting, the data seen was names and credit or debit card details entered at checkout. The company's letter says it is not aware of any actual misuse of the information.
Card details let criminals make purchases until the card is cancelled. A name plus a card number also makes a phishing call or text from a fake bank fraud department more believable, so expect that kind of contact.
The company's response
Numrich removed the unauthorized access on April 5, 2022, investigated, and notified affected customers and state regulators.
Was your data in it?
The notice went to customers whose checkout details were involved. If you bought from the site between January and April 2022 and got a letter, assume your card was affected.
What to do if you were in it
- 1
Check your card statements now
Look for charges you don't recognize on any card you used at gunpartscorp.com in early 2022. Report fraud to your card issuer straight away. The FTC advises checking your statements after a breach.
- 2
Ask your card issuer for a new card
If a card you used there is still active, ask for a replacement number. It's free and quick, and it makes the old number useless.
- 3
Ignore unexpected calls and texts about your card
Criminals use real names and card details to sound legitimate. Hang up and call the number on the back of your card instead.
- 4
Consider a credit freeze
The notice doesn't list Social Security numbers, so a freeze isn't required, but it's free and stops new credit being opened in your name. See the FTC's steps.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number, and what else is exposed about you online.
Official filings
- Washington Attorney General , filed 6 Jun 2022 : 1,327 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the Numrich Gun Parts breach?
The company wrote to the customers it identified, 45,169 people in total per the Maine filing. If you shopped on its site between January 23 and April 5, 2022 and got a letter, you were affected.
What was exposed?
Reporting says names and payment card details. The company's letter says it knows of no actual misuse.
Should I change my password?
The sources don't list passwords. If you reuse your Numrich password elsewhere, change it there anyway and turn on two-factor login.
Is there a settlement?
The sources used for this page don't mention a settlement.
Sources
- maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c85b1a09-ea9b-4402-abb0-4d404f02d730.shtml
- oag.ca.gov/system/files/Numrich%20-%20Sample%20Notice.pdf
- consumer.ftc.gov/consumer-alerts/2022/10/have-you-been-affected-data-breach-read
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
Something wrong or out of date? Tell us and we'll re-check it.
