MalwareRetail & ConsumerRetailInfostealerCustomer Data InvolvedData ExfiltratedFinancial accountFinancial credentialsLowContained

Sterling M Enterprises

bd_6ab58c1d8a0dfe42 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 14, 2015

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for Sterling M Enterprises →

Sterling M Enterprises (dba Lee's Deli) notified the California AG of a breach involving malicious software installed on point-of-sale systems at two locations (San Francisco and Menlo Park). The malware captured payment card account numbers, expiration dates, and CVV codes. The incident window spans from November 3, 2014, to May 20, 2015. The company engaged forensic experts, rendered the malware inoperable, and replaced POS components. The incident is contained.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 3, 2014

Begins

Aug 14, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Sterling M Enterprises
norm: sterling m
Domain: leesdeli.com

Name: Sterling M Enterprises
norm: sterling m
Domain: leesdeli.com
Also named: Sterling M Enterprisesdba oflegal entity
Lee's Delidba oftrade name
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 3, 2014 – May 20, 2015
Materiality determined: —
Notification sent: Aug 5, 2015
Affected individuals: Not disclosed
Data types: Financial accountFinancial credentials
Attack vector: Unknown
MITRE ATT&CK: T1056 Input CaptureT1119 Automated Collection
Threat actor: ExternalFinancial

During the incident: Engaged outside forensic experts to assist us in investigating and remediating the situation
Promptly rendering the malware inoperable
Replacing and reconfiguring various components of our point-of-sale systems
Changes made: Continuing to review and enhance our security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-57419
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2015
Raw hash: ee4c31fcc9f1872702c3bb6c9fade9decd58591f3932bf83705cc1d4484c3ad2

Reporting entitySterling M Enterprises

Victim entitySterling M Enterprises

IncidentUnknown

Stated responseEngaged outside forensic experts to assist us in investigating and remediating the situation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov