MalwareRetail & ConsumerRetailInfostealerCapture App DataData ExfiltratedCustomer Data InvolvedMass DistributionMulti-Stage ChainIdentity (basic)Government IDFinancial accountCredentialsMediumResolved

The UPS Store, Inc.

bd_2817665ef214de71 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 20, 2014

To disclose

—

Affected

Not disclosed

Confidence

75%

Full breach record for The UPS Store, Inc. →5 incidents on file

The UPS Store, Inc. discovered malware at 51 of its 4,470 franchised center locations across 24 states following a government bulletin about a broad-based malware intrusion targeting U.S. retailers. The malware was present between January 20 and August 11, 2014, potentially exposing customer names, postal addresses, email addresses, payment card information, and — for MailBox Manager account holders — Social Security numbers and driver's license numbers. Franchise owner login credentials were also potentially exposed. The company retained an IT security firm, implemented system enhancements and antivirus updates, and arranged free identity protection and credit monitoring through AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 20, 2014

Begins

Aug 20, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The UPS Store, Inc.
norm: the ups store
Domain: theupsstore.com

Name: The UPS Store, Inc.
norm: the ups store
Domain: theupsstore.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 20, 2014 – Aug 11, 2014
Materiality determined: —
Notification sent: Aug 20, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1056 Input CaptureT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Retained an IT security firm and conducted a review of its systems and the systems of its franchised center locations
Implemented various system enhancements and antivirus updates
Offering identity protection and credit monitoring services through AllClear ID at no cost to affected customers
Changes made: Implemented various system enhancements and antivirus updates
Malware was eliminated as of August 11, 2014
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-46291
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2014
Raw hash: fc72664a5c61bcf246521b5330cd9bed8e376ad885684f73942b88e8b26b8336

Reporting entityThe UPS Store, Inc.

Victim entityThe UPS Store, Inc.

IncidentUnauthorized Access

Stated responseRetained an IT security firm and conducted a review of its systems and the systems of its franchised center locations

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov