HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountCredentialsLowContained

William Cole Vineyards LLC

bd_9b45ec2f2073cc28 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 29, 2015

Filed

Jun 19, 2015

To disclose

21 days

Affected

4state residents only

Linked

2 filings

Confidence

66%

Full breach record for William Cole Vineyards LLC →

William Cole Vineyards LLC notified 4 NH residents of a data breach involving its third-party payment processor, Missing Link Networks. Unauthorized access occurred April 1-30, 2015, exposing customer names, card numbers, passwords, and DOBs. The incident was discovered May 29, 2015, and contained by the vendor.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 58 days

discovery → filing · 21 days

Apr 1, 2015

Begins

May 29, 2015

Discovered

Jun 19, 2015

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Part of Missing Link Network supply-chain incident (2015) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_123a2bb66773f8b12015-06-22 · +3dVerified

Name: William Cole Vineyards LLC
norm: william cole vineyards

Name: William Cole Vineyards LLC
norm: william cole vineyards
Industry: Retail & Consumerllm

Discovered: May 29, 2015
Breach occurred: Apr 1, 2015 – Apr 30, 2015
Undetected for: 58 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 10, 2015
Affected individuals: 4state-resident count only
Data types: Identity (basic)Financial accountCredentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid AccountsT1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Office of the Attorney General
Third party: via Missing Link Networks, Inc.
Initial access: supply_chain

During the incident: Working proactively and aggressively with Missing Link to address the issue
Missing Link has notified the credit and debit card companies
Missing Link has upgraded its security and made system enhancements
Changes made: Missing Link has upgraded its security and made system enhancements that will prevent this breach from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 19 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/william-cole-vineyards-20150619.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2015
Raw hash: 305bb72e3346def782a2a80a16db2b51a1ef765640d1f88799251f2e012791fd

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWilliam Cole Vineyards LLC

Victim entityWilliam Cole Vineyards LLC

Incidentdiscovered May 29, 2015

Stated responseWorking proactively and aggressively with Missing Link to address the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov