MalwareRetail & ConsumerRetailRansomwareData EncryptedFinancial accountLowContained

Salt Life, LLC

bd_431c9fd4ac4d9ab5 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 3, 2019

To disclose

—

Affected

10state residents only

Linked

3 filings

Confidence

67%

Full breach record for Salt Life, LLC →

Salt Life notified Montana AG of a data incident where unauthorized malware intrusions captured customer payment card information from its eCommerce website. Salt Life does not store payment data but believes it was exposed during entry. Malware was removed, and Kroll provided 1 year of free identity monitoring. No SSN exposed. 61 Rhode Island residents impacted.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 3, 2019

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_2a7ced82c62a41062019-05-03Verified
New Hampshire State AGbd_05e7f43d4595367e2019-05-06 · +3dVerified

Name: Salt Life, LLC
norm: salt life
Domain: saltlife.com

Name: Salt Life, LLC
norm: salt life
Domain: saltlife.com
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: Apr 19, 2019
Affected individuals: 10state-resident count only
Data types: Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Removed the malware associated with the intrusions from our system
Taken actions to secure our website by working with recognized data security experts to conduct a thorough investigation
Taken procedural, policy, and technical steps to help minimize the risk of this type of event
Engaged Kroll to provide identity monitoring services at no cost to you for 1 year
Changes made: Taken procedural, policy, and technical steps to help minimize the risk of this type of event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMay 3 · first

Montana State AGMay 3 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/CON-Delta-Apparel-Consumer-Notice-Template.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 3, 2019
Raw hash: ede157e481e1a4b7fd8d1a355ff1dd101eb3ab2b5a4ad1d21e967fc0e052df13

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySalt Life, LLC

Victim entitySalt Life, LLC

IncidentRansomware

Stated responseRemoved the malware associated with the intrusions from our system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov