HackingPIIIdentity (basic)Government IDFinancial accountMediumContained

Landry's, Inc.

bd_c0d73c6c1f7fe3b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 10, 2016

Filed

Feb 1, 2016

To disclose

—

Affected

411state residents only

Confidence

64%

Full breach record for Landry's, Inc. →3 incidents on file

Landry's, Inc. notified affected individuals that on April 10, 2016, an outside attacker compromised its computer system and accessed tax software data. The unauthorized access potentially exposed full names, addresses, Social Security numbers, bank account numbers, and dates of birth. Landry's reset passwords, implemented VPN and authentication enhancements, retained forensic specialists, and reported the incident to the IRS Criminal Investigation Division. Affected individuals were offered one year of Equifax Credit Watch Gold identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 1, 2016

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed411 affectedView incident

Name: Landry's, Inc.
norm: landry s

Name: Landry's, Inc.
norm: landry s

Discovered: Apr 10, 2016
Breach occurred: Apr 10, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 411state-resident count only
Data types: PIIIdentity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported the incident to law enforcement and the IRS Criminal Investigation Division
Initial access: exploit_public_facing

During the incident: Changing all passwords used to log in to our computers
Creating a virtual private network (VPN) as an additional layer of security for remote connections to our system
Implementing additional technology and procedures to authenticate users when they log in to our system
Retained legal counsel and computer forensics specialists to help us investigate and respond to this incident
Reported the incident to law enforcement and the IRS Criminal Investigation Division and are cooperating with them to investigate it further
Changes made: Partnered with Equifax to provide its Credit Watch Gold identity theft protection product for one year at no charge
Provided instructions on how to obtain a free copy of credit report
Provided information on how to place a fraud alert or security freeze on credit file
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2016/Landry's%2CInc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 1, 2016
Raw hash: a9d1ef247057bd15e65b177e567dbc039fac6cfa8e7bbef4f3aba65de9642992

Reporting entityLandry's, Inc.

Victim entityLandry's, Inc.

Incidentdiscovered Apr 10, 2016

Stated responseChanging all passwords used to log in to our computers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov