HackingRetail & ConsumerRetailVulnerability ExploitRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Financial accountCredentialsLowContained

RK Internet, LLC

bd_0da6d40a66b3a70c · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 7, 2014

Filed

Apr 2, 2014

To disclose

26 days

Affected

11state residents only

Linked

2 filings

Confidence

66%

Full breach record for RK Internet, LLC →

RK Internet, LLC (Rural King) notified 11 New Hampshire residents of a data breach. Unauthorized access occurred Feb 6–Mar 12, 2014, via malware on the web server. Compromised data included names, credit/debit card numbers, CVVs, addresses, and potentially email/passwords. Rural King engaged forensic investigators, reset passwords, notified the FBI, and provided one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 29 days

discovery → filing · 26 days

Feb 6, 2014

Begins

Mar 7, 2014

Discovered

Apr 2, 2014

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_1eb01c517c4e41dc2014-04-03 · +1dVerified

Name: RK Internet, LLC
norm: rk internet
Domain: ruralking.com

Name: RK Internet, LLC
norm: rk internet
Domain: ruralking.com
Industry: Retail & Consumerllm

Discovered: Mar 7, 2014
Breach occurred: Feb 6, 2014 – Mar 12, 2014
Undetected for: 29 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 2, 2014
Affected individuals: 11state-resident count only
Data types: Identity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Office of the New Hampshire Attorney GeneralWorking with the Federal Bureau of Investigation
Initial access: exploit_public_facing

During the incident: Hired a leading third party computer forensics firm to investigate the criminal cyber security intrusion and to terminate the unauthorized access
Removed the malware immediately
Contacted New Hampshire residents via letter on April 2
Provided one year of free credit monitoring through Experian
Reset all user passwords on its website
Ensured that the credit card brands received notification
Working with the Federal Bureau of Investigation
Changes made: Working with a third party computer forensics firm to harden its web server to help prevent future breaches
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 2 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rk-internet-rural-king-20140402.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2014
Raw hash: 75f97792aadcf7e7c07b3ee35bba9b9d4571156ff312400aa413a04c31e5f2a3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRK Internet, LLC

Victim entityRK Internet, LLC

Incidentdiscovered Mar 7, 2014

Stated responseHired a leading third party computer forensics firm to investigate the criminal cyber security intrusion and to terminate the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov