MalwareRetail & ConsumerRetailRansomwareStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

AHW LLC

bd_2a4cf64161f100f9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 19, 2013

Filed

May 22, 2013

To disclose

9 weeks

Affected

11state residents only

Linked

2 filings

Confidence

64%

Full breach record for AHW LLC →

AHW LLC notified New Hampshire AG of a data breach affecting 11 residents. Unauthorized access occurred Sept-Dec 2012 via malware exposure on online stores (Green Fun Store, etc.), compromising Discover cardholder names, card numbers, expiration dates, and security codes. Discovered March 19, 2013. AHW engaged Kroll for credit monitoring and implemented security upgrades including new servers and tokenization.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 198 days

discovery → filing · 9 weeks / 64 days

Sep 2, 2012

Begins

Mar 19, 2013

Discovered

May 22, 2013

Filed

vs. sector median

+2 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3d15a18f840a783e2013-05-29 · +7dVerified

Name: AHW LLC
norm: ahw

Name: AHW LLC
norm: ahw
Industry: Retail & Consumerllm

Discovered: Mar 19, 2013
Breach occurred: Sep 2, 2012 – Dec 31, 2012
Undetected for: 198 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 22, 2013
Affected individuals: 11state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Installed corporate MacAfee antivirus
Ran several scans for viruses and malware
Removed malware detected by Combofix, Malwarebytes, Hitman Pro 3, and Super Anti Spyware
Completed an incident report and provided it to Elavon
Made a claim to its insurance company
Retained Kroll Data Breach Services to alert potentially affected customers
Changes made: Installing a new server at Green Fun Store physical location
Hosting a newer more secure SQL database that will use the latest tokenization technology
Deploying a stand-alone hardware intrusion detection appliance
Hired Area Wide Technologies to maintain security patches to server and SQL database
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 22 · first · this page

Massachusetts State AG+7d

Pattern: first filing May 22 (NH), last May 29 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ahw-20130522.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2013
Raw hash: ac10c3f4291ec618457631cacfa4e8fadac2651f24f8e6b9fdbd1429dfc7c5a6

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAHW LLC

Victim entityAHW LLC

Incidentdiscovered Mar 19, 2013

Stated responseInstalled corporate MacAfee antivirus

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov