Sears Holdings Corporation
bd_462527eb50757e67 · schema v1 · pii pii-v1
Full breach record for Sears Holdings Corporation →2 incidents on fileSears Holdings Management Corporation notified customers that a vendor providing online support services for Sears.com and Kmart.com experienced a security incident. An unauthorized individual incorporated a malicious script into the vendor's code, collecting personal information (name, address) and payment card information from customers who completed online orders between September 27, 2017, and October 12, 2017. Sears was informed of the incident in mid-March 2018. Payment card companies were notified, and an investigation was conducted. No evidence suggests Sears' internal systems were accessed.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 27, 2017
Begins
May 17, 2018
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Oregon State AGbd_34500406ffb3c68c2018-05-17Verified
- South Carolina State AGbd_6ccd597659c183d32018-05-18 · +1dVerified
- Montana State AGbd_e91e1c561709d7b72018-04-25 · +22dVerified
- Washington State AGbd_4127990c5317e1c82018-04-24 · +23dCandidate
Show 1 more filing ↓Show fewer ↑up to 23d gap
- New Hampshire State AGbd_542e3870138514372018-04-24 · +23dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Apr 24 (WA), last May 18 (SC) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.