MalwareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
32 Bar Blues, LLC
bd_c3ef525552cb5ef6 · schema v1 · pii pii-v1
Full breach record for 32 Bar Blues, LLC →32 Bar Blues LLC notified the New Hampshire Attorney General of a data security incident involving its third-party payment processor, Freestyle Solutions. Malware installed on Freestyle's systems between September 2020 and February 2022 captured payment card data. 32 Bar Blues identified 77,303 affected individuals nationwide, including 534 New Hampshire residents. The company notified its payment processor, engaged forensic support, and mailed notices to affected customers by October 6, 2022.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_6ba25512e76f272bMaine State AGfiled 2022-10-06Verified
- bd_a0df373a479c131aCalifornia State AGfiled 2022-10-06Candidate
- bd_c2c64fd97c5ee333Maine State AGfiled 2022-10-05(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/32bar-blues-20221006.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 6, 2022
- Raw hash
- 680433d0255ff9f27cd38ba2f32f655adee9205ab110a0c470339fb549e45f6c
Reporting entity
- Name
- 32 Bar Blues, LLCnorm: 32 bar blues
- Domain
- 32barblues.com
Victim entity
- Name
- 32 Bar Blues, LLCnorm: 32 bar blues
- Domain
- 32barblues.com
Incident
- Discovered
- Mar 1, 2022
- Materiality determined
- —
- Notification sent
- Oct 6, 2022
- Affected individuals
- 77,303
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney GeneralFreestyle notified the Cyber Fraud Task Force of the U.S. Secret Service’s Chicago Field Office
- Third party
- via Freestyle Solutions
- Initial access
- supply_chain
Compliance
- Time to disclose
- 31 weeks(219 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.