HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedTargetedIdentity (basic)Financial accountLowContained

Bigfoot Gun Belts

bd_2ca7076544cad337 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 1, 2018

Filed

Mar 23, 2018

To disclose

7 weeks

Affected

33state residents only

Linked

3 filings

Confidence

66%

Full breach record for Bigfoot Gun Belts →

Bigfoot Gun Belts notified the NH AG that customer card data was scraped from its e-commerce portal between Oct 31, 2017 and Feb 1, 2018. Suspicious activity was detected on Feb 1, 2018. 33 NH residents affected. Data included names and card numbers. Forensic investigators engaged; enhanced safeguards implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 93 days

discovery → filing · 7 weeks / 50 days

Oct 31, 2017

Begins

Feb 1, 2018

Discovered

Mar 23, 2018

Filed

vs. sector median

1 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_970cefff5402d5d02018-03-23Candidate
Massachusetts State AGbd_59f14329d7644b0a2018-03-27 · +4dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Bigfoot Gun Belts
norm: bigfoot gun belts
Industry: Retail & Consumerllm

Discovered: Feb 1, 2018
Breach occurred: Oct 31, 2017 – Feb 1, 2018
Undetected for: 93 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 23, 2018
Affected individuals: 33state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Engaged external forensic investigators
Commenced a prompt and thorough investigation into the incident
Implemented enhanced security safeguards to protect from similar intrusions
Conducting ongoing monitoring of its website and payment portal
Notified the payment card networks
Changes made: Implemented enhanced security safeguards to protect from similar intrusions
Conducting ongoing monitoring of its website and payment portal to ensure that they are secure and cleared of any malicious code
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGMar 23 · first

New Hampshire State AGMar 23 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bigfoot-gun-belts-20180323.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 23, 2018
Raw hash: d4ca45bf00f8da53f8c503d070e3dd2343941e3094aba06de3c477317d5057ed

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityBigfoot Gun Belts

Incidentdiscovered Feb 1, 2018

Stated responseEngaged external forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov