MalwareRetail & ConsumerRetailRansomwareCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountAuthenticationLowContained

MUJI U.S.A. LIMITED

bd_3161c832f0747ad6 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 30, 2015

To disclose

—

Affected

664state residents only

Linked

2 filings

Confidence

69%

MUJI U.S.A. LIMITED reported a cyberattack where malware infiltrated its online server, potentially exposing customer PII including names, addresses, and credit card details (number, expiration, CVV) for orders placed between Jan 22 and July 20, 2015. Approximately 664 Washington residents were affected. The company shut down its site, engaged forensic specialists, eliminated the malware, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 22, 2015

Begins

Nov 30, 2015

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8cfbc4cd060e3aef2015-12-07 · +7dVerified

Name: MUJI U.S.A. LIMITED
norm: muji u.s.a.
Domain: muji.eu
Industry: Retail

Name: MUJI U.S.A. LIMITED
norm: muji u.s.a.
Domain: muji.eu
Industry: Retail
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 22, 2015 – Jul 20, 2015
Materiality determined: —
Notification sent: Nov 27, 2015
Affected individuals: 664state-resident count only
Data types: PIIIdentity (basic)Financial accountAuthentication
Data elements: Financial account numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure 100-199d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Closed our online web shop in order to protect our customers
Hired cybersecurity specialists to investigate the incident and provide a thorough report
Eliminated the malware used to capture personal information
Increased our security by taking measures
Offering each potentially impacted individual free access to ProtectMylD Elite, an identity protection product provided by Experian
Changes made: Eliminated the malware used to capture personal information
Increased our security by taking measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Washington State AGNov 30 · first · this page

Massachusetts State AG+7d

Pattern: first filing Nov 30 (WA), last Dec 7 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9599.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2015
Raw hash: 7b1c901504513c4eae4bb476e50229d3cbf736fbad186e3dcbdeb73dea75a165

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMUJI U.S.A. LIMITED

Victim entityMUJI U.S.A. LIMITED

IncidentRansomware

Stated responseClosed our online web shop in order to protect our customers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com