HackingRetail & ConsumerRetailVulnerability ExploitStolen CredentialsTargetedData ExfiltratedIdentity (basic)Financial accountCredentialsLowActive

Honig's Whistle Stop

bd_67c50f3aa9f459c9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 5, 2016

Filed

Nov 9, 2016

To disclose

5 weeks

Affected

12state residents only

Linked

2 filings

Confidence

66%

Full breach record for Honig's Whistle Stop →

Honig's Whistle Stop reported a data breach in New Hampshire affecting 12 residents. Unauthorized access occurred Aug 4-30, 2016, via a malicious file upload on their website. Confirmed Oct 5, 2016. Exposed data included names, credit card numbers, CVVs, passwords, and addresses. FBI and Kroll engaged. Remediation included patching, credential reset, and PCI-compliant migration.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 62 days

discovery → filing · 5 weeks / 35 days

Aug 4, 2016

Begins

Oct 5, 2016

Discovered

Nov 9, 2016

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_e75f98e8f4afe0722016-11-09Candidate

Name: Honig's Whistle Stop
norm: honig s whistle stop

Name: Honig's Whistle Stop
norm: honig s whistle stop
Industry: Retail & Consumerllm

Discovered: Oct 5, 2016
Breach occurred: Aug 4, 2016 – Aug 30, 2016
Undetected for: 62 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 8, 2016
Affected individuals: 12state-resident count only
Data types: Identity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's OfficeProvided written notice to other state regulators and national consumer reporting agencies
Initial access: exploit_public_facing

During the incident: Contacted law enforcement (FBI)
Engaged Kroll for forensic investigation and notification support
Reviewed internal security systems
Changes made: Removed malicious code
Patched the security flaw
Re-issued administrative credentials
Implemented close monitoring of the website for suspicious activity
Tokenization of all credit card data
Migrated the website to a new system hosted by a PCI-compliant third party specialist
Transitioning to a third-party hosted payment system
Retaining an independent third party to complete quarterly PCI scans
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGNov 9 · first

New Hampshire State AGNov 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/honigs-whistle-stop-20161109.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2016
Raw hash: 680d3b3fbe5f688404ebb30952bbf6f232b295b96cf908fa7f7edc9bf80e0c7a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHonig's Whistle Stop

Victim entityHonig's Whistle Stop

Incidentdiscovered Oct 5, 2016

Stated responseContacted law enforcement (FBI)

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov