MalwareRetail & ConsumerRetailRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

Wilson's Gun Shop, Inc.

bd_ff435776ec107f5b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 7, 2022

To disclose

—

Affected

1,906state residents only

Linked

9 filings

Confidence

66%

Full breach record for Wilson's Gun Shop, Inc. →

Wilson’s Gun Shop, Inc. d/b/a Wilson Combat notified customers of a data breach involving its payment processor, FreeStyle Software, Inc. Malware on FreeStyle's server captured payment card data (numbers, CVV, billing info) from transactions between Sept 17, 2020, and Feb 3, 2022. FreeStyle removed malware, engaged forensic experts, and notified law enforcement and card brands. No specific count of affected individuals was provided.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Sep 17, 2020

Begins

Sep 7, 2022

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_1a99362a85e71f0b2022-09-07Verified by operator
Montana State AGbd_3b3e41a18cf934942022-09-07Verified
Oregon State AGbd_6f3f1d835a29e9612022-09-07Verified
Indiana State AGbd_862ffcc2719d1df82022-09-08 · +1dVerified

Show 4 more filings ↓up to 5d gap

Massachusetts State AGbd_ab80f8ec246c150f2022-09-08 · +1dVerified
California State AGbd_f28ec71a19f624532022-09-08 · +1dVerified
New Hampshire State AGbd_2c579e94ac98d0622022-09-12 · +5dVerified
Washington State AGbd_89ede39eb8479a802022-09-12 · +5dVerified

Name: Wilson's Gun Shop, Inc.
norm: wilson s gun shop
Domain: wilsoncombat.com

Name: Wilson's Gun Shop, Inc.
norm: wilson s gun shop
Domain: wilsoncombat.com
Also named: Wilson’s Gun Shop, Inc.dba oflegal entity
Wilson Combatdba oftrade name
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Sep 17, 2020 – Feb 3, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 1,906state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: State and federal law enforcement authorities have been notified
Third party: via FreeStyle Software, Inc.
Initial access: supply_chain

During the incident: FreeStyle immediately had malware removed
Retained data security experts to investigate
State and federal law enforcement authorities have been notified
Coordinating with the payment card companies
Source: Quoted from the filing itself, not independently verified.

Compliance flags: SC CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Maine State AGSep 7 · first

Montana State AGSep 7 · first

Oregon State AGSep 7 · first

South Carolina State AGSep 7 · first · this page

Indiana State AG+1d

Massachusetts State AG+1d

California State AG+1d

New Hampshire State AG+5d

Washington State AG+5d

Pattern: first filing Sep 7 (ME), last Sep 12 (WA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/WilsonsGunShopInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2022
Raw hash: d7d035509a9fd1b5635e3fc093aff486bdfc05f05b00be87b5a54dfcb50da00a

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityWilson's Gun Shop, Inc.

Victim entityWilson's Gun Shop, Inc.

IncidentThird-Party / Supply Chain

Stated responseFreeStyle immediately had malware removed

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov