MalwareRetail & ConsumerRetailRansomwareData EncryptedPIIFinancial accountFinancial credentialsLowContained

Mintie Corporation

bd_3845badbcd194b37 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 16, 2018

Filed

Mar 27, 2018

To disclose

6 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Mintie Corporation →

Mintie Corporation disclosed a ransomware attack discovered on February 16, 2018. The incident potentially exposed credit card authorization forms containing names, addresses, card numbers, CVVs, and expiration dates. No data exfiltration was confirmed. The company engaged forensic investigators, notified the FBI and state agencies, and offered 12 months of credit monitoring and identity theft protection to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 39 days

Feb 16, 2018

Discovered

Mar 27, 2018

Filed

vs. sector median

4 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_98ee2a11c9c040422018-03-27Verified

Name: Mintie Corporation
norm: mintie

Name: Mintie Corporation
norm: mintie
Industry: Retail & Consumerllm

Discovered: Feb 16, 2018
Materiality determined: —
Notification sent: Mar 27, 2018
Affected individuals: 1state-resident count only
Data types: PIIFinancial accountFinancial credentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of InvestigationNotified applicable state agencies

During the incident: Contacted IT consultant to stop migration and begin investigation
Began running deep scans and reviewing systems to identify malicious malware
Changed all system passwords
Hired a specialized forensic IT investigator
Notified the Federal Bureau of Investigation and applicable state agencies
Reviewed office procedures with IT consultant
Remediated impacted hard drives to eliminate malicious remnants
Offering identity theft protection services through ID Experts
Changes made: Remediated impacted hard drives to eliminate malicious remnants on our system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMar 27 · first

Montana State AGMar 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Mintie-Corporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2018
Raw hash: 623890438817d59d7c479a9bebd4c2f5de96ecf81e3d8586a8b23f89ee18c374

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMintie Corporation

Victim entityMintie Corporation

Incidentdiscovered Feb 16, 2018

Stated responseContacted IT consultant to stop migration and begin investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov