MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedFinancial accountIdentity (basic)LowContained

Native Shoes

bd_776d1b78e048aa07 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 1, 2017

Filed

Aug 16, 2017

To disclose

11 weeks

Affected

22state residents only

Confidence

64%

Full breach record for Native Shoes →

Native Shoes notified Montana residents of a malware attack on its website (nativeshoes.com) affecting purchases between April 28, 2015, and June 23, 2017. Compromised data included credit/debit card info, names, addresses, emails, and phone numbers. The company took systems offline, engaged forensic investigators, and offered one year of credit monitoring via CyberScout.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 765 days

discovery → filing · 11 weeks / 76 days

Apr 28, 2015

Begins

Jun 1, 2017

Discovered

Aug 16, 2017

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed22 affectedView incident

Name: Native Shoes
norm: native shoes
Domain: nativeshoes.com

Name: Native Shoes
norm: native shoes
Domain: nativeshoes.com
Industry: Retail & Consumerllm

Discovered: Jun 1, 2017
Breach occurred: Apr 28, 2015 – Jun 23, 2017
Undetected for: 765 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 16, 2017
Affected individuals: 22state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: informed relevant law enforcement and regulatory authorities
Initial access: exploit_public_facing

During the incident: Took our systems offline
Engaged well-respected forensics firms to conduct a full investigation
Informed relevant law enforcement and regulatory authorities
Retained respected forensic and cyber security professionals
Took the affected system permanently offline
Developed a new online shopping website
Arranged for CyberScout to provide daily credit monitoring
Changes made: Developed a new online shopping website, which will run on an entirely redesigned, upgraded platform
Investing significant time and energy in review and testing of our electronic security
Enhancements to our security policies, procedures and practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Native-Shoes.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2017
Raw hash: 0ad50ce2b4d96e75e6badaadf9402e93b5df5f237108c829352da6423a5d2cf9

Reporting entityNative Shoes

Victim entityNative Shoes

Incidentdiscovered Jun 1, 2017

Stated responseTook our systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov