HackingVulnerability ExploitData ExfiltratedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
The Mick’s in Cooperstown
bd_30063a7ef0246953 · schema v1 · pii pii-v1
Full breach record for The Mick’s in Cooperstown →Mickey’s Place (dba The Mick’s in Cooperstown) disclosed a data breach where unauthorized code was inserted into its website between Feb 7 and Sep 2, 2024, diverting customer credit card data (name, address, card number, CVV). The company engaged a cybersecurity firm, secured the site, and is offering Equifax credit monitoring to affected customers.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-25-micks-cooperstown-dba-mickeys-place-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 25, 2024
- Raw hash
- 5c71bfc1facb8435a174181303b626670b66ad91dbf7c630b6523aaf8a105d62
Reporting entity
- Name
- The Mick’s in Cooperstownnorm: the mick s in cooperstown
Victim entity
- Name
- The Mick’s in Cooperstownnorm: the mick s in cooperstown
Incident
- Discovered
- Sep 2, 2024
- Materiality determined
- —
- Notification sent
- Oct 25, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.