MalwareRansomwareData EncryptedSupply Chain (3P Vendor)PCIFINANCIAL_ACCOUNTLowContained
Jack Anthony Industries, Inc
bd_2e98fa41f44b2ba1 · schema v1 · pii pii-v1
Full breach record for Jack Anthony Industries, Inc →Jack Anthony Industries, Inc. experienced a data security incident at its 7 Flags Car Wash & Lube locations in California. A third-party POS platform provider was compromised with malware between Feb 6-23, 2017, exposing payment card data (names, numbers, security codes). The company removed the malware, engaged monitoring, and offered one year of credit monitoring. No specific count of affected individuals was disclosed.
California clockDiscovered Mar 27, 2017 → Notified Mar 31, 20174d ✓ CA 60-day OK18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-67641
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2017
- Raw hash
- 6955d267cb56985908af6e50e6d09559af7204a779f4149ba221ad3e71d1cdcf
Reporting entity
- Name
- Jack Anthony Industries, Incnorm: jack anthony
Victim entity
- Name
- Jack Anthony Industries, Incnorm: jack anthony
Incident
- Discovered
- Mar 27, 2017
- Materiality determined
- Mar 31, 2017
- Notification sent
- Mar 31, 2017
- Affected individuals
- Not disclosed
- Data types
- PCIFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified California Attorney General Xavier Becerra
- Third party
- via third-party platform provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 4d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 27, 2017→ Notified: Mar 31, 20174d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.