HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

WRJ Holdings, LLC d/b/a Classic Firearms

bd_f0e660df94bd452c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 8, 2017

Filed

Sep 1, 2017

To disclose

18 days

Affected

66state residents only

Confidence

66%

Full breach record for WRJ Holdings, LLC d/b/a Classic Firearms →

WRJ Holdings, LLC d/b/a Classic Firearms notified NH AG of a breach affecting 66 NH residents. Unauthorized access occurred April 24–June 8, 2017, via modification of a legitimate file to gain server access. Payment card info and PII were compiled. Notification sent Sept 5, 2017, offering 12 months identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 45 days

discovery → filing · 12 weeks / 85 days

Apr 24, 2017

Begins

Jun 8, 2017

Discovered

Sep 1, 2017

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed66 affectedView incident

Name: WRJ Developers, LLC
norm: wrj developers
Domain: wrjdevelopers.com

Name: WRJ Holdings, LLC d/b/a Classic Firearms
norm: wrj holdings llc d b a classic firearms
Also named: WRJ Holdings, LLCdba oflegal entity
Classic Firearmsdba oftrade name
Industry: Retail & Consumerllm

Discovered: Jun 8, 2017
Breach occurred: Apr 24, 2017 – Jun 8, 2017
Undetected for: 45 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2017
Affected individuals: 66state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Consumer Protection & Antitrust Bureau
Initial access: exploit_public_facing

During the incident: Engaged a digital forensics firm to shut down the affected server and investigate
Rebuilt, secured, and tested its server infrastructure to remove the threat and strengthen its security posture
Cooperating with law enforcement
Notifying payment card networks
Providing 12 months of identity repair and identity theft monitoring services to affected consumers through AllClear ID
Changes made: Rebuilt, secured, and tested its server infrastructure to remove the threat and strengthen its security posture
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wrj-holding-20170901.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2017
Raw hash: dbdd2f8f7dde3839f123bb9c6a4977976e0e55ae251ad764c4acdd0d33814b26

Reporting entityWRJ Developers, LLC

Victim entityWRJ Holdings, LLC d/b/a Classic Firearms

Incidentdiscovered Jun 8, 2017

Stated responseEngaged a digital forensics firm to shut down the affected server and investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov