DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedPCIFinancial accountPIILowContained

Dickey's Barbecue Pit

bd_999eced63eb08322 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 13, 2020

Filed

Dec 29, 2020

To disclose

11 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%
Full breach record for Dickey's Barbecue Pit3 incidents on file

Dickey's Barbecue Pit issued a supplemental notice regarding a payment card security incident involving unauthorized code installed at approximately 55 franchised locations. The incident occurred between June 9, 2019, and November 24, 2020. The code accessed payment card track data, including names, primary account numbers, and expiration dates. Dickey's engaged forensic investigators, notified law enforcement, and removed the code.

Incident timeline

undetected · 492 days
discovery → filing · 11 weeks / 77 days

Jun 9, 2019

Begins

Oct 13, 2020

Discovered

Dec 29, 2020

Filed

vs. sector median

+3 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
California State AGDec 29 · first
Delaware State AGDec 29 · first
Oregon State AGDec 29 · first
Montana State AGDec 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.