HackingVulnerability ExploitTargetedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Epic Foods
bd_85400f2a181b901f · schema v1 · pii pii-v1
Full breach record for Epic Foods →Bistro Burger, Inc. reported a security incident at its San Francisco location where malicious software was installed on POS systems. The incident, occurring between October 2, 2014, and December 4, 2014, potentially compromised payment card data (account numbers, expiration dates, security codes) and customer names. The company contained the breach by replacing the hard drive, reconfiguring the POS environment, and installing firewall protection.
California clockDiscovered Mar 5, 2015 → Notified Mar 5, 20150d ✓ CA 60-day OK4 days discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_70c3f52753b7ae35California State AGfiled 2015-04-21(43d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-48758
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 9, 2015
- Raw hash
- 1c8bbb9944140b247755a372c88e59c80b9b02750b5704978cc07b4748ef677b
Reporting entity
- Name
- Epic Foodsnorm: epic foods
Victim entity
- Name
- Epic Foodsnorm: epic foods
Incident
- Discovered
- Mar 5, 2015
- Materiality determined
- —
- Notification sent
- Mar 5, 2015
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 days(4 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 5, 2015→ Notified: Mar 5, 20150d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.