DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitCapture Stored DataTargetedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsLowContained

Walters and Mason Retail, Inc. d/b/a Altar'd State

bd_0047509bbb9d633b · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2018

Filed

Dec 4, 2018

To disclose

6 weeks

Affected

8state residents only

Confidence

66%
Full breach record for Walters and Mason Retail, Inc. d/b/a Altar'd State →

Walters and Mason Retail, Inc. d/b/a Altar'd State notified the NH AG of a security incident where unauthorized code was added to its checkout page, potentially compromising customer payment data (names, addresses, card numbers, CVVs) for 8 NH residents. The incident occurred between Aug 15 and Oct 10, 2018, and was discovered on Oct 23, 2018. The company removed the code and enhanced security.

Incident timeline

undetected · 69 days
discovery → filing · 6 weeks / 42 days

Aug 15, 2018

Begins

Oct 23, 2018

Discovered

Dec 4, 2018

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.