MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedFinancial accountIdentity (basic)PIILowContained

Bronson Nutritionals LLC

bd_9d6d0d47042ccdb1 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 19, 2018

To disclose

—

Affected

774state residents only

Linked

7 filings

Confidence

70%

Full breach record for Bronson Nutritionals LLC →

Bronson Nutritionals, LLC notified the Washington AG of a malware incident affecting customer payment card data (names, addresses, card numbers, CVV, expiration) for purchases made between May 15, 2017 and Jan 30, 2018. Approximately 774 Washington residents were affected. Notices were sent March 19, 2018.

J jump to incidentP pin to compareR raw source

Incident timeline

May 15, 2017

Begins

Mar 19, 2018

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_17ed5062db5676632018-03-19Candidate
New Hampshire State AGbd_4ddcc3c7c38bd90a2018-03-19Verified
Massachusetts State AGbd_a0cd4340dd9088102018-03-19Verified
California State AGbd_a960a35f842c00c92018-03-19Verified

Show 2 more filings ↓up to 8d gap

Massachusetts State AGbd_d85bf41c2b2bb98e2018-03-19Verified
Oregon State AGbd_4cd212d40ed085f02018-03-27 · +8dVerified

Name: Hunton & Williams LLP
norm: hunton williams
Domain: bronsonvitamins.com

Name: Bronson Nutritionals LLC
norm: bronson nutritionals
Domain: bronsonvitamins.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: May 15, 2017 – Jan 30, 2018
Materiality determined: —
Notification sent: Mar 19, 2018
Affected individuals: 774state-resident count only
Data types: PIIFinancial account
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure 200-299d
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial

During the incident: Removed the malware and took steps to secure its systems
Retained a data security expert to help determine the nature and scope of the incident
Working with law enforcement authorities and coordinating its efforts with the payment card organizations
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Montana State AGMar 19 · first

New Hampshire State AGMar 19 · first

Massachusetts State AGMar 19 · first

California State AGMar 19 · first

Massachusetts State AGMar 19 · first

Washington State AGMar 19 · first · this page

Oregon State AG+8d

Pattern: first filing Mar 19 (MT), last Mar 27 (OR) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9772.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2018
Raw hash: 9a2ca7bd01444c7d692f7d259077d7428321d4ca7364ebc713b8951513fe166c

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityHunton & Williams LLP

Victim entityBronson Nutritionals LLC

IncidentUnknown

Stated responseRemoved the malware and took steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com