HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountAuthenticationLowContained

Golden Lion Operations, Inc.

bd_5decd5e745021d1f · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 8, 2018

Filed

Feb 4, 2019

To disclose

21 weeks

Affected

13state residents only

Confidence

65%

Full breach record for Golden Lion Operations, Inc. →

Golden Lion Operations, Inc. notified Montana AG of a security incident involving its third-party vendor Magento, Inc. Unauthorized code injected into the website's JavaScript between June 6 and September 8, 2018, may have captured customer payment card data and PII. The company removed the code, engaged forensic investigators, and reported to card networks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 94 days

discovery → filing · 21 weeks / 149 days

Jun 6, 2018

Begins

Sep 8, 2018

Discovered

Feb 4, 2019

Filed

vs. sector median

+14 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident

Name: Golden Lion Operations, Inc.
norm: golden lion operations

Name: Golden Lion Operations, Inc.
norm: golden lion operations
Industry: Retail & Consumerllm

Discovered: Sep 8, 2018
Breach occurred: Jun 6, 2018 – Sep 8, 2018
Undetected for: 94 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 4, 2019
Affected individuals: 13state-resident count only
Data types: Identity (basic)Financial accountAuthentication
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Third party: via Magento, Inc.
Initial access: exploit_public_facing

During the incident: Removed the malicious code from the Magento eCommerce platform
Reported the incident to the payment card networks
Launched an investigation, with the assistance of a leading cybersecurity firm
Changes made: Made improvements to the Magento eCommerce platform and online sales process to enhance existing security measures
Deployment of new software to block attempts to inject unauthorized code into the Magento eCommerce platform
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Golden-Lion-Operations-Inc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 4, 2019
Raw hash: c32b860e6ca5a06bda4fdba6a036b4903df62b36f3edf400cff8a54277e40fc5

Reporting entityGolden Lion Operations, Inc.

Victim entityGolden Lion Operations, Inc.

Incidentdiscovered Sep 8, 2018

Stated responseRemoved the malicious code from the Magento eCommerce platform

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov