MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedFinancial accountPCILowContained

Cici Enterprises, LP

bd_0e71ce8368cd4d7d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 19, 2016

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for Cici Enterprises, LP →2 incidents on file

CiCi Enterprises, LP notified the NH AG of a POS malware incident affecting some restaurant locations. Intrusions began in 2015 and early 2016. Payment card data may have been compromised. No NH stores were impacted, but notification was sent out of caution. Forensic analysis confirmed malware elimination.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 1, 2015

Begins

Jul 19, 2016

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Washington State AGbd_10e69150d9e35ee72016-07-19Candidate
Montana State AGbd_7e11d4fb0a32f9a32016-07-19Verified by operator
Massachusetts State AGbd_37f639f1c4d5eb992016-07-20 · +1dVerified
Oregon State AGbd_a221bf92c125ab7d2016-07-20 · +1dVerified by operator

Show 2 more filings ↓up to 6d gap

California State AGbd_e92d6f0f92b7ed602016-07-20 · +1dVerified
South Carolina State AGbd_207ad30e77f468522016-07-25 · +6dVerified

Name: Cici Enterprises, LP
norm: cici enterprises

Name: Cici Enterprises, LP
norm: cici enterprises
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 1, 2015 – Jul 19, 2016
Materiality determined: —
Notification sent: Jul 19, 2016
Affected individuals: Not disclosed
Data types: Financial accountPCI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input CaptureT1071 Application Layer Protocol
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Notified law enforcement and state agencies
Retained a third party cyber security firm to perform a forensic analysis
Informed payment card networks
Notified potentially impacted members of Cicis loyalty program via email
Posted notification on the homepage for Cicis website
Changes made: Initiated heightened security measures
Conducted restaurant by restaurant review and remediation
Eliminated threat of malware from POS systems
Continues to monitor and upgrade systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGJul 19 · first

Montana State AGJul 19 · first

New Hampshire State AGJul 19 · first · this page

Massachusetts State AG+1d

Oregon State AG+1d

California State AG+1d

South Carolina State AG+6d

Pattern: first filing Jul 19 (WA), last Jul 25 (SC) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cici-enterprises-20160719.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 19, 2016
Raw hash: b86acc5806f0aed29e6d8f6570dec70dd4eaab1e00e369c1cee311e133dfc1d4

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityCici Enterprises, LP

Victim entityCici Enterprises, LP

IncidentUnauthorized Access

Stated responseNotified law enforcement and state agencies

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov