HackingRetail & ConsumerRetailTheftSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumActive

Colt Express Outsourcing Services, Inc.

bd_74d18dcfda369daf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 9, 2008

Filed

Jun 19, 2008

To disclose

10 days

Affected

11state residents only

Confidence

66%

Full breach record for Colt Express Outsourcing Services, Inc. →

bebe Stares, Inc. notified the NH AG that its vendor, Colt Express Outsourcing Services, Inc., suffered a break-in and theft of computer equipment on May 26, 2008. The theft exposed PII (name, address, SSN) of approximately 11 NH residents (plus dependents) who participated in bebe's benefit plan between 2004 and 2007. bebe discovered the incident on June 9, 2008, and began notifying affected individuals on June 23, 2008.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 10 days

May 26, 2008

Begins

Jun 9, 2008

Discovered

Jun 19, 2008

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident

Name: bebe Stares, Inc.
norm: bebe stares

Name: Colt Express Outsourcing Services, Inc.
norm: colt express outsourcing
Industry: Retail & Consumerllm

Discovered: Jun 9, 2008
Breach occurred: May 26, 2008
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 23, 2008
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Reported the incident to the Walnut Creek, CA Police Department
Cooperating with their investigation
Providing notification to potentially affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/colt-express-20080619.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2008
Raw hash: 875633efb785ec25a6772729eb12f81b1c01f48c98ac9e44bc11e22de1116ef7

Reporting entitybebe Stares, Inc.

Victim entityColt Express Outsourcing Services, Inc.

Incidentdiscovered Jun 9, 2008

Stated responseReported the incident to the Walnut Creek, CA Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov