MalwareRetail & ConsumerRetailRansomwareData ExfiltratedCustomer Data InvolvedPCIFinancial accountIdentity (basic)LowContained

PrimoHoagies Franchising, Inc.

bd_5845fa1e3cf6c961 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 18, 2020

Filed

Apr 20, 2020

To disclose

9 weeks

Affected

20state residents only

Linked

5 filings

Confidence

66%

Full breach record for PrimoHoagies Franchising, Inc. →

PrimoHoagies Franchising, Inc. notified the NH AG of a malware intrusion affecting online payment card data for customers who ordered between July 15, 2019, and Feb 18, 2020. Approx 20 NH residents affected. Data included names, addresses, card numbers, expiration dates, and security codes. PrimoHoagies engaged cybersecurity firms, notified card brands and law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 218 days

discovery → filing · 9 weeks / 62 days

Jul 15, 2019

Begins

Feb 18, 2020

Discovered

Apr 20, 2020

Filed

vs. sector median

+1 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_a2c52e93cb217a0c2020-04-18 · +2dVerified
Indiana State AGbd_af7a1c1f2f3480122020-04-17 · +3dVerified
Delaware State AGbd_d0e788434af4b5922020-04-17 · +3dVerified
Montana State AGbd_7a9e245e5d4f2b6e2020-04-16 · +4dCandidate

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: PrimoHoagies Franchising, Inc.
norm: primohoagies franchising
Industry: Retail & Consumerllm

Discovered: Feb 18, 2020
Breach occurred: Jul 15, 2019 – Feb 18, 2020
Undetected for: 218 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 18, 2020
Affected individuals: 20state-resident count only
Data types: PCIFinancial accountIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Worked with industry-leading cybersecurity firms to assist with an investigation
Contacted payment card brands (Visa, Mastercard, American Express, Discover)
Notified law enforcement about this criminal activity
Identified the group of cardholders who could have been affected
Placed additional security on its online payment platform
Changes made: Resolved the site security issue
Placed additional security on its online payment platform to prevent a similar incident from happening in the future
Adjusted the payment platform
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGApr 16 · first

Indiana State AG+1d

Delaware State AG+1d

Massachusetts State AG+2d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/primohoagies-franchising-20200420.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2020
Raw hash: 36706bd63d4c9ecfdbc5ea74eeb939122b3bae06cc29b7320a69111f8f898181

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityPrimoHoagies Franchising, Inc.

Incidentdiscovered Feb 18, 2020

Stated responseWorked with industry-leading cybersecurity firms to assist with an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov