MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedPCIFinancial accountIdentity (basic)LowActive

On The Border

bd_8aabaabf41f5f353 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 14, 2019

Filed

Dec 2, 2019

To disclose

18 days

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for On The Border →2 incidents on file

On The Border disclosed a security incident involving malware on a payment processing system affecting certain restaurants in 27 states. Payment card information (names, numbers, expiration dates, verification codes) of guests who dined between April 10, 2019, and August 10, 2019, may have been accessed. The company engaged forensic investigators, notified law enforcement and card networks, and is strengthening cybersecurity systems.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 218 days

discovery → filing · 18 days

Apr 10, 2019

Begins

Nov 14, 2019

Discovered

Dec 2, 2019

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_dbcf38e32e6abc062019-11-26 · +6dCandidate

Name: On The Border
norm: on the border
Domain: ontheborder.com

Name: On The Border
norm: on the border
Domain: ontheborder.com
Industry: Retail & Consumerllm

Discovered: Nov 14, 2019
Breach occurred: Apr 10, 2019 – Aug 10, 2019
Undetected for: 218 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PCIFinancial accountIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1059 Command and Scripting Interpreter
Threat actor: ExternalFinancial
Regulator citations: Notified payment card networksCooperating with law enforcement
Initial access: external_remote_services

During the incident: Retained a leading forensics firm
Cooperating with law enforcement
Notified payment card networks
Taken steps to contain and remediate the incident
Working to identify and remove the malware
Changes made: Working with leading partners in cybersecurity to strengthen and enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGNov 26 · first

South Carolina State AG+6d · this page

Pattern: first filing Nov 26 (MT), last Dec 2 (SC) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2019/OntheBorder.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2019
Raw hash: 06ef7abe85491bacee03fd691f60347ea3089affd07b82cafa243e958feea151

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityOn The Border

Victim entityOn The Border

Incidentdiscovered Nov 14, 2019

Stated responseRetained a leading forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov