DisclosureLens
MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedFinancial accountLowContained

Cici Enterprises, LP

bd_207ad30e77f46852 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 1, 2016

Filed

Jul 25, 2016

To disclose

21 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

64%
Full breach record for Cici Enterprises, LP2 incidents on file

Cici Enterprises, LP (Cicis) disclosed that malware infected POS systems at some restaurant locations starting in early March 2016 (with some intrusions dating back to 2015). The malware compromised payment card information. A forensic firm confirmed the threat on July 19, 2016. The company notified law enforcement, state agencies, and payment card networks. No specific count of affected individuals was provided.

Incident timeline

undetected · 425 days
discovery → filing · 21 weeks / 146 days

Jan 1, 2015

Begins

Mar 1, 2016

Discovered

Jul 25, 2016

Filed

vs. sector median

+13 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filingsup to 6d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
New Hampshire State AGJul 19 · first
Washington State AGJul 19 · first
Montana State AGJul 19 · first
South Carolina State AG+6d · this page

Pattern: first filing Jul 19 (NH), last Jul 25 (SC) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.