HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIIdentity (basic)Financial accountFinancial credentialsMediumContained

Abbott Nutrition

bd_95fa0d7eda7802ba · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 6, 2017

Filed

Feb 23, 2017

To disclose

17 days

Affected

1,819state residents only

Linked

6 filings

Confidence

70%

Full breach record for Abbott Nutrition →

Abbott Nutrition reported a third-party breach involving its e-commerce provider, Aptos, Inc. Unauthorized access occurred between June 2013 and December 2016, affecting customer PII and payment data. Abbott notified the WA AG on Feb 23, 2017, and offered 12 months of identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1346 days

discovery → filing · 17 days

Jun 1, 2013

Begins

Feb 6, 2017

Discovered

Feb 23, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 6 about the same incident.View merged incident

Part of Aptos supply-chain incident (2017) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_0cd633a2434d003b2017-02-23Candidate
New Hampshire State AGbd_29e0de0d96cc5ec52017-02-23Verified
California State AGbd_3ac8e4cb2399a0ad2017-02-24 · +1dVerified
Massachusetts State AGbd_63469f035a9eb9c42017-02-24 · +1dVerified

Show 1 more filing ↓up to 1d gap

Oregon State AGbd_f8c28ef7cd98405d2017-02-24 · +1dVerified

Name: WILMER CUTLER PICKERING HALE AND DORR LLP
norm: wilmer cutler pickering hale and dorr

Name: Abbott Nutrition
norm: abbott nutrition
Industry: Retail & Consumerllm

Discovered: Feb 6, 2017
Breach occurred: Jun 1, 2013 – Dec 31, 2016
Undetected for: 1,346 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 23, 2017
Affected individuals: 1,819state-resident count only
Data types: PIIIdentity (basic)Financial accountFinancial credentials
Data elements: Financial account numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 500+dexposure 500+d
WA-stated discovery: Found after the fact
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Bob FergusonAptos shared information with law enforcement
Third party: via Aptos, Inc.
Initial access: supply_chain

During the incident: Disabled AbbottStore.com’s website order function
Moving to a new system to process orders
Set up a “Where to Buy” tool on AbbottStore.com
Retained AllClear ID to protect affected individuals’ identities for 12 months at no cost
Mailing notification letters to all affected customers
Changes made: Moving to a new system to process orders from AbbottStore.com
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGFeb 23 · first

New Hampshire State AGFeb 23 · first

Washington State AGFeb 23 · first · this page

California State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9668.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 23, 2017
Raw hash: cfc4c43ff19cbe24834d7dee004c6d3610f8e853061036db89becdc29275a330

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWILMER CUTLER PICKERING HALE AND DORR LLP

Victim entityAbbott Nutrition

Incidentdiscovered Feb 6, 2017

Stated responseDisabled AbbottStore.com’s website order function

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com