norm: bmp pennantUSno LEI · no CIKMax severity: Low

Canonical registry

BMP/Pennant Holdings, LLC

ent_d707626d0ed2047af630af10

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: BMP/Pennant Holdings, LLC
Normalized: bmp pennant— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

🐻California State AGas victim2016-07-07
Wendy's disclosed a malware attack on franchisee POS systems. The attack resulted from compromised remote access credentials of a service provider, allowing attackers to deploy malware targeting payment card data (cardholder name, card number, expiration date, CVV, service code) starting in late fall 2015. Wendy's first reported unusual activity in February 2016 and confirmed malware in May 2016. The malware was disabled. Affected customers were offered one year of fraud consultation and identity restoration services.