MalwareRetail & ConsumerRetailRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Financial accountLowContained

Wilson's Gun Shop, Inc.

bd_f28ec71a19f62453 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 8, 2022

To disclose

—

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for Wilson's Gun Shop, Inc. →

California Attorney General's office received a breach notification from Wilson's Gun Shop, Inc. regarding a third-party payment processor, FreeStyle Software, Inc. Malware on FreeStyle's servers captured customer payment card data, names, and billing addresses from September 17, 2020, through February 3, 2022. FreeStyle removed the malware, engaged forensic experts, and notified law enforcement. Wilson's Gun Shop notified affected customers.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 17, 2020

Begins

Sep 8, 2022

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_862ffcc2719d1df82022-09-08Verified
Massachusetts State AGbd_ab80f8ec246c150f2022-09-08Verified
Maine State AGbd_1a99362a85e71f0b2022-09-07 · +1dVerified by operator
Montana State AGbd_3b3e41a18cf934942022-09-07 · +1dVerified

Show 4 more filings ↓up to 4d gap

Oregon State AGbd_6f3f1d835a29e9612022-09-07 · +1dVerified
South Carolina State AGbd_ff435776ec107f5b2022-09-07 · +1dVerified
New Hampshire State AGbd_2c579e94ac98d0622022-09-12 · +4dVerified
Washington State AGbd_89ede39eb8479a802022-09-12 · +4dVerified

Name: Wilson's Gun Shop, Inc.
norm: wilson s gun shop
Domain: wilsoncombat.com

Name: Wilson's Gun Shop, Inc.
norm: wilson s gun shop
Domain: wilsoncombat.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Sep 17, 2020 – Feb 3, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: State and federal law enforcement authorities have been notified
Initial access: exploit_public_facing

During the incident: FreeStyle immediately had malware removed
FreeStyle retained data security experts to investigate
State and federal law enforcement authorities have been notified
FreeStyle has been coordinating with the payment card companies
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Maine State AGSep 7 · first

Montana State AGSep 7 · first

Oregon State AGSep 7 · first

South Carolina State AGSep 7 · first

Indiana State AG+1d

Massachusetts State AG+1d

California State AG+1d · this page

New Hampshire State AG+5d

Washington State AG+5d

Pattern: first filing Sep 7 (ME), last Sep 12 (WA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557029
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2022
Raw hash: 40c83e21aa6469c9a93c3a54b135ba85b23e188ba7e2d97f6317612555b40251

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityWilson's Gun Shop, Inc.

Victim entityWilson's Gun Shop, Inc.

IncidentThird-Party / Supply Chain

Stated responseFreeStyle immediately had malware removed

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov