MalwareHospitalityHospitalityRansomwareCapture Stored DataFin7TargetedData ExfiltratedData EncryptedDelayed DiscoveryIdentity (basic)Financial accountLowResolved

Burgerville LLC

bd_9de128a10f9b0c13 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 22, 2018

Filed

Nov 27, 2018

To disclose

14 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

69%

Full breach record for Burgerville LLC →

Burgerville LLC reported a cyberattack by the Fin7 group. Unauthorized access occurred between August 2017 and September 2018. Burgerville was notified by the FBI on August 22, 2018. Malware was installed to capture payment card data (names, card numbers, CVVs). Remediation completed September 30, 2018. No specific count of affected individuals was disclosed due to the hackers' concealment tactics.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 386 days

discovery → filing · 14 weeks / 97 days

Aug 1, 2017

Begins

Aug 22, 2018

Discovered

Nov 27, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Oregon State AGbd_144499a87612bfd12018-10-30 · +28dCandidate

Name: Burgerville LLC
norm: burgerville
Domain: burgerville.com

Name: Burgerville LLC
norm: burgerville
Domain: burgerville.com
Industry: Hospitalityllm

Discovered: Aug 22, 2018
Breach occurred: Aug 1, 2017 – Sep 30, 2018
Undetected for: 386 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 3, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Data elements: NameFinancial account number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 400-499dexposure 400-499d
WA-stated discovery: Found while ongoing
Attack vector: Ransomware· Fin7
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid AccountsT1119 Automated Collection
Threat actor: Fin7ExternalFinancial
Regulator citations: Notified FBICooperated with FBI investigation
Initial access: external_remote_services

During the incident: Launched a full forensic investigation with the assistance of a team of third-party cybersecurity professionals
Cooperated with the FBI
Neutralized the malware on its systems
Ensured that all access points to the hackers were effectively removed
Upgraded systems to eradicate the breach
Changes made: Neutralized the malware placed on its network during the breach
Continue to work with its cybersecurity firm to evaluate and upgrade its security systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Oregon State AGOct 30 · first

Washington State AG+28d · this page

Pattern: first filing Oct 30 (OR), last Nov 27 (WA) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10601.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 27, 2018
Raw hash: ad2fc3a8991d9ce0e2f1a7fdd56e925688c5717ca21e41a4e7fb2cae17739fde

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBurgerville LLC

Victim entityBurgerville LLC

Incidentdiscovered Aug 22, 2018

Stated responseLaunched a full forensic investigation with the assistance of a team of third-party cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com