DisclosureLens
HackingRetail & ConsumerRetailSkimmerData ExfiltratedCustomer Data InvolvedPCIFinancial accountLowContained

Dickey's Barbecue Pit

bd_587f27fda101e825 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 13, 2020

Filed

Dec 29, 2020

To disclose

11 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

62%
Full breach record for Dickey's Barbecue Pit3 incidents on file

Dickey's Barbecue Pit disclosed a payment card security incident involving unauthorized code (skimmer) installed at approximately 55 franchised locations. The code captured magnetic stripe track data (cardholder name, PAN, expiration, CVV) from June 9, 2019, to November 24, 2020. The incident was discovered on October 13, 2020. Forensic firms were engaged, law enforcement notified, and the code removed. This is a supplemental notice updating a prior November 2020 disclosure.

Incident timeline

undetected · 492 days
discovery → filing · 11 weeks / 77 days

Jun 9, 2019

Begins

Oct 13, 2020

Discovered

Dec 29, 2020

Filed

vs. sector median

+3 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Delaware State AGDec 29 · first
Montana State AGDec 29 · first
Oregon State AGDec 29 · first
California State AGDec 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.