HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIdentity (basic)Financial accountCredentialsLowContained

RAIL EUROPE NORTH AMERICA INC.

bd_63b6ec325c6f6bce · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 16, 2018

Filed

Apr 24, 2018

To disclose

10 weeks

Affected

97state residents only

Linked

6 filings

Confidence

66%

Full breach record for RAIL EUROPE NORTH AMERICA INC. →

Rail Europe North America Inc. notified the NH AG of a security breach affecting 97 NH residents. Unauthorized access to the IT platform occurred between Nov 29, 2017 and Feb 16, 2018, compromising names, credit card numbers, usernames, and passwords. Forensic firms were engaged, and individual notifications were sent on April 23, 2018.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 79 days

discovery → filing · 10 weeks / 67 days

Nov 29, 2017

Begins

Feb 16, 2018

Discovered

Apr 24, 2018

Filed

vs. sector median

+2 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Washington State AGbd_9891e90aca1e59d52018-04-30 · +6dCandidate
Montana State AGbd_de1de524d44906b92018-05-07 · +13dVerified
California State AGbd_8e65dcbf52f852752018-05-08 · +14dVerified
Oregon State AGbd_9dbec4740c5f69492018-05-08 · +14dVerified

Show 1 more filing ↓up to 14d gap

Massachusetts State AGbd_ff2b6f42fa0c94432018-05-08 · +14dVerified

Name: K&L Gates LLP
norm: k l gates
Domain: klgates.com

Name: RAIL EUROPE NORTH AMERICA INC.
norm: rail europe north america
Industry: Retail & Consumerllm

Discovered: Feb 16, 2018
Breach occurred: Nov 29, 2017 – Feb 16, 2018
Undetected for: 79 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 23, 2018
Affected individuals: 97state-resident count only
Data types: Identity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Office of Attorney General of New Hampshire
Initial access: exploit_public_facing

During the incident: Undertook an investigation of its ecommerce websites
Engaged two forensic analysis and security auditing firms
Notifying all individuals whose personal information may have been compromised
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

New Hampshire State AGApr 24 · first · this page

Washington State AG+6d

Montana State AG+13d

California State AG+14d

Oregon State AG+14d

Massachusetts State AG+14d

Pattern: first filing Apr 24 (NH), last May 8 (MA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rail-europe-20180424.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 24, 2018
Raw hash: c67b58cc0a4861557043bb840d785bf13e5ada0a8306c0fa9672c167f8a56da6

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityK&L Gates LLP

Victim entityRAIL EUROPE NORTH AMERICA INC.

Incidentdiscovered Feb 16, 2018

Stated responseUndertook an investigation of its ecommerce websites

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov