MalwareRansomwareData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
National Stores, Inc.
bd_43a4788ba58b38c9 · schema v1 · pii pii-v1
Full breach record for National Stores, Inc. →National Stores, Inc. reported a malware incident affecting point-of-sale systems between July 16 and December 11, 2017. The breach potentially exposed customer payment card information, including names, card numbers, expiration dates, and security codes. The company engaged cybersecurity experts and the FBI, removed the malware, and contained the incident. The exact number of affected individuals was unknown at the time of filing.
California clockDiscovered Dec 22, 2017 → Notified Jan 22, 201831d ✓ CA 60-day OK4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-133027
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 22, 2018
- Raw hash
- e4c6da7deffb042c8045b1a18635ea79d455ef71e922db36b88cb76e6bba528a
Reporting entity
- Name
- National Stores, Inc.norm: national stores
Victim entity
- Name
- National Stores, Inc.norm: national stores
Incident
- Discovered
- Dec 22, 2017
- Materiality determined
- —
- Notification sent
- Jan 22, 2018
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted California data breach reporting form
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 22, 2017→ Notified: Jan 22, 201831d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.