MalwareInfostealerData ExfiltratedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Sterling M Enterprises
bd_6ab58c1d8a0dfe42 · schema v1 · pii pii-v1
Full breach record for Sterling M Enterprises →Sterling M Enterprises (dba Lee's Deli) notified customers of a security incident at two California locations where malicious software captured payment card data (account numbers, expiration dates, CVVs) from POS systems between Nov 2014 and May 2015. The incident is contained; forensic experts were engaged.
California clockDiscovered Aug 5, 2015 → Notified Aug 5, 20150d ✓ CA 60-day OK9 days discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-57419
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 14, 2015
- Raw hash
- ee4c31fcc9f1872702c3bb6c9fade9decd58591f3932bf83705cc1d4484c3ad2
Reporting entity
- Name
- Sterling M Enterprisesnorm: sterling m
Victim entity
- Name
- Sterling M Enterprisesnorm: sterling m
Incident
- Discovered
- Aug 5, 2015
- Materiality determined
- —
- Notification sent
- Aug 5, 2015
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unknown
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 5, 2015→ Notified: Aug 5, 20150d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.