San Antonio Shoemakers, Inc.

San Antonio Shoemakers, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-07-20. 677 Massachusetts residents were affected. The report records the breach type as electronic.

San Antonio Shoemakers experienced a malware attack on checkout systems at US retail stores between April 21 and June 13, 2016. Malicious software collected payment card data including cardholder name, number, security code, and expiration date. The company engaged cybersecurity experts, cooperated with law enforcement (US Attorney's Office SDNY, Secret Service), and delayed notification for 30 days per law enforcement request. Affected customers were offered 24 months of identity protection.

San Antonio Shoemakers, Inc. notified the Washington AG of a malware attack on checkout systems from April 21 to June 13, 2016, affecting payment card data. Discovered June 8, 2016. 511 Washington residents affected. Notified July 18, 2016. Identity monitoring provided.

San Antonio Shoemakers, Inc. notified customers of a malware infection on checkout systems at US retail stores between April 21 and June 13, 2016. The malware collected payment card data (names, numbers, security codes, expiration dates). No other customer data was affected. The company engaged forensic experts, coordinated with law enforcement and payment card organizations, and provided 24 months of free identity protection services.

San Antonio Shoemakers, Inc. notified New Hampshire AG of a malware infection on checkout systems (April 21–June 13, 2016) compromising payment card data. Discovered June 8, 2016. 23 NH residents affected. Law enforcement delayed notification by 30 days. Remediation included system security and 24-month identity monitoring.