MalwareRetail & ConsumerRetailInfostealerData ExfiltratedCustomer Data InvolvedPCIFinancial accountLowResolved

Island Restaurants, LP and Champagne French Bakery Cafe

bd_8a3c4dab9d96549b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 19, 2019

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Island Restaurants, LP and Champagne French Bakery Cafe →

Island Restaurants, LP and Champagne French Bakery Cafe experienced a payment card data breach between February 18, 2019, and September 27, 2019. Malware installed on point-of-sale devices captured magnetic stripe data, including cardholder names, card numbers, expiration dates, and internal verification codes. The incident was contained, malware removed, and forensic investigators engaged. No specific count of affected individuals was disclosed in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 18, 2019

Begins

Dec 19, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Island Restaurants, LP and Champagne French Bakery Cafe
norm: island restaurants lp and champagne french bakery cafe

Name: Island Restaurants, LP and Champagne French Bakery Cafe
norm: island restaurants lp and champagne french bakery cafe
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Feb 18, 2019 – Sep 27, 2019
Materiality determined: —
Notification sent: Dec 19, 2019
Affected individuals: Not disclosed
Data types: PCIFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified the California Attorney GeneralProvided information to support an investigation by law enforcement

During the incident: Immediately started an investigation
Took steps to end unauthorized access to our payment card network
Engaged a leading computer forensic firm
Notified the card networks
Provided information to support an investigation by law enforcement
Contained the incident
Removed the malware from all locations
Changes made: Working with leading partners in cybersecurity to strengthen and enhance payment card security
Strengthening the security of systems as we go forward
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-185316
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 19, 2019
Raw hash: 9cd50c37c20b7031c5177e305a2697cf2af23c3da3283784b62caf5849659ff3

Reporting entityIsland Restaurants, LP and Champagne French Bakery Cafe

Victim entityIsland Restaurants, LP and Champagne French Bakery Cafe

IncidentUnknown

Stated responseImmediately started an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov