HackingRetail & ConsumerRetailAbuse Of FunctionalityTargetedIdentity (basic)Financial accountFinancial credentialsLowContained

Altar’d State

bd_fb93bf8d83c460fe · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2018

Filed

Nov 30, 2018

To disclose

5 weeks

Affected

7state residents only

Confidence

65%

Altar’d State notified customers of a checkout skimming incident where unauthorized code copied payment card data from August 15 to October 10, 2018. The code was discovered on October 23, 2018, and removed. Data exposed included names, addresses, and full payment card details.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 69 days

discovery → filing · 5 weeks / 38 days

Aug 15, 2018

Begins

Oct 23, 2018

Discovered

Nov 30, 2018

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident

Name: Walters and Mason Retail (Atalr'd State)
norm: walters and mason retail atalr d state

Name: Altar’d State
norm: altar'd state
Domain: altardstate.com
Industry: Retail & Consumerllm

Discovered: Oct 23, 2018
Breach occurred: Aug 15, 2018 – Oct 10, 2018
Undetected for: 69 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 27, 2018
Affected individuals: 7state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Launched an investigation with assistance from a cybersecurity firm
Removed the unauthorized code
Implemented additional security enhancements to our website
Changes made: Implemented additional security enhancements to our website
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(38 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Walters-and-Mason-Retail-Atalrd-State.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2018
Raw hash: f00f728229ccbea462b04ba7197ed3096e90ef2ec60e4d8441429fecda7addde

Reporting entityWalters and Mason Retail (Atalr'd State)

Victim entityAltar’d State

Incidentdiscovered Oct 23, 2018

Stated responseLaunched an investigation with assistance from a cybersecurity firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov