HackingRetail & ConsumerRetailStolen CredentialsPhishingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowActive

Mission Linen Supply Company

bd_68a732540c14b0eb · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 29, 2012

Filed

Jul 24, 2012

To disclose

25 days

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for Mission Linen Supply Company →

Mission Linen Supply Company reported a security breach involving its third-party webstore vendor, UniformMarket LLC. Unauthorized access to the vendor's servers in June/July 2012 resulted in the theft of customer names, addresses, and credit card details (including CVV/PAN). 2 New Hampshire residents were identified as affected. The company is cooperating with the Secret Service and law enforcement, and offering 1 year of Equifax identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 28 days

discovery → filing · 25 days

Jun 1, 2012

Begins

Jun 29, 2012

Discovered

Jul 24, 2012

Filed

vs. sector median

6 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_28433580056b95412012-07-24Candidate
Massachusetts State AGbd_596bf66e5aeb66362012-07-26 · +2dVerified

Name: Mission Linen Supply Company
norm: mission linen supply

Name: Mission Linen Supply Company
norm: mission linen supply
Industry: Retail & Consumerllm

Discovered: Jun 29, 2012
Breach occurred: Jun 1, 2012 – Jul 31, 2012
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 24, 2012
Affected individuals: 2state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's office
Initial access: supply_chain

During the incident: Cooperating with local law enforcement and the U.S. Secret Service
Working with merchant bank
Directed the vendor to protect all personal information that might have been compromised
Began sending urgent emails to customers alerting them of the possibility of compromise
Began an extensive internal investigation
Notified merchant bank of the suspected issue
Working with third party security consultants to prevent any future unauthorized access
Changes made: Third party vendor will no longer be collecting or storing any credit card information at all
Credit card information will only be collected by a processor whose sole job is the secure collection and processing of credit card information
Provided one year of access to Equifax identity protection services to affected users
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGJul 24 · first

New Hampshire State AGJul 24 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mission-linen-20120724.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 24, 2012
Raw hash: 699c5fd1d03ed3ccf96098a99a855f67e9d7cd21ead8d3c8e11ca7232a969bb2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMission Linen Supply Company

Victim entityMission Linen Supply Company

Incidentdiscovered Jun 29, 2012

Stated responseCooperating with local law enforcement and the U.S. Secret Service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov