HackingRetail & ConsumerRetailVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowActive

Gloria Jean's Coffees

bd_bf1f619e331d2202 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 10, 2008

Filed

Sep 17, 2008

To disclose

7 days

Affected · nationwide

51119 in this filing

Confidence

64%

Full breach record for Gloria Jean's Coffees →

Gloria Jean's Coffee experienced a data breach affecting its e-commerce site hosted by Smith Micro, Inc. Between September 4 and September 10, 2008, an unauthorized individual modified checkout web pages to capture and exfiltrate customer transaction information, including names, addresses, and credit card numbers. The intrusion was identified on September 10, 2008. A total of 511 customers were affected nationwide, including 19 residents of New Hampshire. The company took the website offline, removed malicious code, disabled the attacker's IP, and reported the incident to the US Secret Service. No fraudulent transactions were confirmed at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 7 days

Sep 4, 2008

Begins

Sep 10, 2008

Discovered

Sep 17, 2008

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed511 affectedView incident

Name: Gloria Jean's Gourmet Coffees Corp.
norm: gloria jean's gourmet coffees
Domain: www.gloriajeans.com

Name: Gloria Jean's Coffees
norm: gloria jean s coffees
Domain: gloriajeans.com.tr
Industry: Retail & Consumerllm

Discovered: Sep 10, 2008
Breach occurred: Sep 4, 2008 – Sep 10, 2008
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 17, 2008
Affected individuals: 511state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Reported the incident and provided relevant materials to the United States Secret Service Electronics Crimes Task Force (ECTF)
Third party: via Smith Micro, Inc.
Initial access: exploit_public_facing

During the incident: Took its website off line and confirmed that there was no malicious or unauthorized code included as part of its website before returning the site to service
Contacted the server host of the intruder's log file with consumer information to have the IP addressed disabled and inaccessible
Installed server security solutions to detect and prevent any medications to our web pages with out proper authorization
Locked down File Transfer Protocol ports (FTP) to specific IPs and implemented SSL encryption to this service for our website
Reported the incident and provided relevant materials to the United States Secret Service Electronics Crimes Task Force (ECTF)
Sent notice to affected customers by U.S. First-Class mail and email
Changes made: Installed server security solutions to detect and prevent any medications to our web pages with out proper authorization
Locked down File Transfer Protocol ports (FTP) to specific IPs and implemented SSL encryption to this service for our website
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gloria-jean-coffee-20080917.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 17, 2008
Raw hash: 47766e7fd6dc9be9ca02b30dc36e81ba5a4f62840f8d1d04ab9b5cebcc6bfc89

Reporting entityGloria Jean's Gourmet Coffees Corp.

Victim entityGloria Jean's Coffees

Incidentdiscovered Sep 10, 2008

Stated responseTook its website off line and confirmed that there was no malicious or unauthorized code included as part of its website before returning the site to service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov