MalwareRetail & ConsumerTechnologyRetailRansomwareVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountMediumContained

Alpha Industries, Inc.

bd_6d9248eda249913a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 1, 2016

Filed

Feb 25, 2017

To disclose

17 weeks

Affected

1,013state residents only

Linked

3 filings

Confidence

68%

Full breach record for Alpha Industries, Inc. →2 incidents on file

Aptos, Inc. reported a malware intrusion affecting its digital commerce platform, impacting retailer Alpha Industries. The incident, discovered in November 2016, exposed customer names, addresses, phone numbers, and payment card data for 1,013 Washington residents. Aptos engaged forensic investigators and notified law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 249 days

discovery → filing · 17 weeks / 116 days

Feb 26, 2016

Begins

Nov 1, 2016

Discovered

Feb 25, 2017

Filed

vs. sector median

+7 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_844b26a089b7d69c2017-02-27 · +2dVerified
Oregon State AGbd_9ad577efe8b294302017-03-09 · +12dVerified by operator

Name: Aptos, Inc.
norm: aptos
Domain: aptos.com

Name: Alpha Industries, Inc.
norm: alpha industries
Domain: alphaindustries.com
Industry: Retail & ConsumerllmTechnologyllm

Discovered: Nov 1, 2016
Breach occurred: Feb 26, 2016 – Dec 5, 2016
Undetected for: 249 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 27, 2017
Affected individuals: 1,013state-resident count only
Data types: Identity (basic)Financial account
Data elements: Financial account numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 300-399dexposure 200-299d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Reported to the FBI and the U.S. Department of JusticeLaw enforcement requested Aptos not notify the Retailers before February 5, 2017
Initial access: exploit_public_facing

During the incident: Engaged a leading cybersecurity firm to remove the malware from its systems
Made security updates to the systems, including strengthening access controls
Reported this matter to the FBI and the U.S. Department of Justice
Provided Individual Consumer contact information to affected Retailers
Contacted and offered its cooperation to federal law enforcement
Supplied the numbers of affected cards to their issuers for monitoring
Changes made: Strengthening access controls
Actively monitoring the platform to safeguard personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Washington State AGFeb 25 · first · this page

Montana State AG+2d

Oregon State AG+12d

Pattern: first filing Feb 25 (WA), last Mar 9 (OR) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9675.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2017
Raw hash: 43ab899be487d3243b7ecc7e672971bffc6ae5bc16d04428db170348976c6947

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAptos, Inc.

Victim entityAlpha Industries, Inc.

Incidentdiscovered Nov 1, 2016

Stated responseEngaged a leading cybersecurity firm to remove the malware from its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com