HackingRetail & ConsumerRetailSQL InjectionData ExfiltratedCustomer Data InvolvedPIIFinancial accountAuthenticationLowContained

Rod's Western Palace

bd_1d7654d57ebf1fe0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 8, 2017

Filed

Feb 24, 2017

To disclose

16 days

Affected

602state residents only

Linked

3 filings

Confidence

64%

Full breach record for Rod's Western Palace →

Rod's Western Palace notified customers of a payment portal compromise between Oct 11, 2016 and Feb 10, 2017. Suspicious activity was detected on Feb 8, 2017. Malicious code was removed and law enforcement/payment networks notified. Customer names and credit/debit card details (including CVV) were potentially accessed. No specific count of affected individuals was disclosed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 120 days

discovery → filing · 16 days

Oct 11, 2016

Begins

Feb 8, 2017

Discovered

Feb 24, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_23e2bfca31084e152017-02-24Verified
Massachusetts State AGbd_8172a497adcc5af82017-02-24Verified

Name: Rod's Western Palace
norm: rod s western palace
Domain: rods.com

Name: Rod's Western Palace
norm: rod s western palace
Domain: rods.com
Industry: Retail & Consumerllm

Discovered: Feb 8, 2017
Breach occurred: Oct 11, 2016 – Feb 10, 2017
Undetected for: 120 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 24, 2017
Affected individuals: 602state-resident count only
Data types: PIIFinancial accountAuthentication
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: exploit_public_facing

During the incident: Engaged external IT consultants to assist us
Identified the malicious code, permanently removed it from our site
Implemented enhanced security safeguards to protect from similar intrusions
Conducting ongoing monitoring of our website and payment portal
Notified law enforcement
Notified the payment card networks
Changes made: Implemented enhanced security safeguards
Conducting ongoing monitoring of our website and payment portal
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGFeb 24 · first

Massachusetts State AGFeb 24 · first

Montana State AGFeb 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Rods-Western-Palace.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2017
Raw hash: e4deb6e37014df0896a18c204c5dc380138edb245df6a010bb00fd28f71bd3f9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityRod's Western Palace

Victim entityRod's Western Palace

Incidentdiscovered Feb 8, 2017

Stated responseEngaged external IT consultants to assist us

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov