MalwareRetail & ConsumerRetailRansomwareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)Financial accountLowContained

Movie Mars, Inc

bd_ad73619a8ef28b5f · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 6, 2016

Filed

Feb 25, 2017

To disclose

16 weeks

Affected

524state residents only

Linked

2 filings

Confidence

68%

Full breach record for Movie Mars, Inc →

Movie Mars, Inc. notified Washington AG of a cybersecurity incident involving its third-party platform provider, Aptos, Inc. Unauthorized access occurred between Feb 2016 and Dec 2016, resulting in exposure of customer PII and payment card data. Aptos discovered the intrusion in Nov 2016. 524 Washington residents were notified.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 254 days

discovery → filing · 16 weeks / 111 days

Feb 26, 2016

Begins

Nov 6, 2016

Discovered

Feb 25, 2017

Filed

vs. sector median

+8 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Oregon State AGbd_98d7189efb95d9a42017-03-10 · +13dVerified

Name: Movie Mars, Inc
norm: movie mars

Name: Movie Mars, Inc
norm: movie mars
Industry: Retail & Consumerllm

Discovered: Nov 6, 2016
Breach occurred: Feb 26, 2016 – Dec 5, 2016
Undetected for: 254 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 21, 2017
Affected individuals: 524state-resident count only
Data types: PIIIdentity (basic)Financial account
Data elements: Financial account numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 300-399dexposure 200-299d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified FBINotified U.S. Department of Justice
Third party: via Aptos, Inc.
Initial access: exploit_public_facing

During the incident: Reported matter to the FBI and the U.S. Department of Justice
Worked with a leading cybersecurity firm to remove the malware from its systems
Made security updates to the systems, including strengthening access controls
Changes made: Strengthening access controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(111 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Washington State AGFeb 25 · first · this page

Oregon State AG+13d

Pattern: first filing Feb 25 (WA), last Mar 10 (OR) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9681.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2017
Raw hash: 122537da42c44b64e8ba0ec10cfbd9890a7d5ffebfafda527ebfb90f2f420f03

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMovie Mars, Inc

Victim entityMovie Mars, Inc

Incidentdiscovered Nov 6, 2016

Stated responseReported matter to the FBI and the U.S. Department of Justice

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com