HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataTargetedData ExfiltratedPIIIdentity (basic)Financial accountFinancial credentialsLowContained

Springfield Armory

bd_d71e658166155c4c · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 1, 2015

Filed

Nov 18, 2016

To disclose

15 months

Affected

83state residents only

Linked

7 filings

Confidence

65%

Full breach record for Springfield Armory →2 incidents on file

Springfield Armory notified customers of a payment card skimming incident. Unauthorized access to the web server occurred between Oct 3, 2015 and Oct 9, 2016. Attackers installed code to copy checkout data including names, addresses, and full payment card details. The incident was contained and a security firm was engaged.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 3, 2015

Begins

Nov 18, 2016

Filed

vs. sector median

+56 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Oregon State AGbd_66b92966daeccb072016-11-18Candidate
Washington State AGbd_7ccc5553a3e7a58a2016-11-18Verified
California State AGbd_903891cd41b253562016-11-18Verified
New Hampshire State AGbd_a9379bcfe3266a692016-11-18Verified

Show 2 more filings ↓

Massachusetts State AGbd_c07db66677f8dd7c2016-11-18Verified
Montana State AGbd_fb614ccb596875542016-11-18Verified

Name: Springfield Armory
norm: springfield armory
Domain: springfield-armory.com

Name: Springfield Armory
norm: springfield armory
Domain: springfield-armory.com
Industry: Retail & Consumerllm

Discovered: Sep 1, 2015
Breach occurred: Oct 3, 2015 – Oct 9, 2016
Materiality determined: —
Notification sent: Oct 9, 2016
Affected individuals: 83state-resident count only
Data types: PIIIdentity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Initiated an investigation
Engaged a leading cyber security firm to examine our website network
Stopped the incident
Taking steps to further strengthen the security of our website
Changes made: Taking steps to further strengthen the security of our website to help prevent this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(444 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Oregon State AGNov 18 · first

Washington State AGNov 18 · first

California State AGNov 18 · first

New Hampshire State AGNov 18 · first

Massachusetts State AGNov 18 · first

Montana State AGNov 18 · first

Montana State AGNov 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Springfield-Armory.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 18, 2016
Raw hash: 4389660758b5a7b4cabbfef2ffc52a97a2d0dc7d3a2a2de0a74945bd31682efb

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySpringfield Armory

Victim entitySpringfield Armory

Incidentdiscovered Sep 1, 2015

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov