Beverages & More, Inc. data breach (2018)

Breach window

Aug 2, 2018 → Sep 26, 2018

When the intrusion reportedly occurred, per the linked filings

55 days

Breach discovered

Sep 26, 2018

Reported by CALIFORNIA AG filing

79 days

🐻California State AGFirst filinglinked via multistate filing link · 100%

Filed Dec 14, 2018bd_0c12b3bfeec7342d

Beverages & More, Inc. (dba BevMo!) disclosed a data breach involving its ecommerce platform operated by third-party provider NCR Corporation. Between August 2, 2018, and September 26, 2018, an unauthorized individual installed malicious code on the checkout page to capture payment card numbers, CVV2 codes, and customer PII. The malicious code was removed, and a forensic investigation was conducted. BevMo notified law enforcement and payment card companies. No specific count of affected individuals was disclosed in this filing.

🦬Montana State AGMost recent

Filed Dec 17, 2018bd_a51a23d6e3ed90b0

Beverages & More, Inc. (BevMo) reported a data breach to the Montana Attorney General. The breach was reported on 2018-12-17. The breach occurred from 8/2/2018 to 9/26/2018. 9 Montana residents were affected.

Affected (this filing): 9

Beverages & More, Inc.

Litigation Timing

Timeline