HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained

Zullas LC

bd_aa357fe5d7efd065 · schema v1 · pii pii-v1

Zullas LC dba Cafe Zupas LC notified New Hampshire residents of a data breach occurring between Oct 21-23, 2024. An unauthorized actor accessed the network and copied customer PII (names). The company investigated, cooperated with federal law enforcement, and implemented additional cybersecurity measures and employee training.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

bd_1a73b16986b021caIndiana State AGfiled 2025-02-25Verified
bd_2f7626a151348af8Maryland State AGfiled 2025-02-25Verified
bd_371ba1d20a7127e6Vermont State AGfiled 2025-02-25Verified
bd_80d667b75c28fe3eMontana State AGfiled 2025-02-25Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/zullas-lc-cafe-zupas-20250225.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2025
Raw hash: 851f77b84b2f291ef23d2545b66ca593ffe1823cfd92f0b4a2df3eae7e50e56d

Reporting entity

Name: Zullas LC
norm: zullas lc

Victim entity

Name: Zullas LC
norm: zullas lc

Incident

Discovered: Oct 21, 2024
Materiality determined: —
Notification sent: Feb 25, 2025
Affected individuals: 1
Data types: PIIIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: cooperating with federal law enforcement’s investigationproviding written notice of this incident to relevant state regulators
Initial access: valid_credentials

Compliance

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.