Sur La Table

Summary

SLT Lending SPV experienced a data breach involving unauthorized access to its network over a period in March, compromising sensitive employee information. The intrusion, detected via unusual network activity, was contained and investigated with external cybersecurity support. Exposed data included names, driver’s license and state identification numbers, and medical or health details. The company identified affected files, determined the scope of impacted individuals, and issued notification letters to employees whose personal information was accessed.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

SLT Lending SPV, Inc., operating as the retail company Sur La Table, experienced a data security incident in March 2023 involving unauthorized access to its computer systems. The company detected unusual activity within its network and launched an investigation with the assistance of a cybersecurity firm. Subsequent forensic analysis confirmed that an unauthorized third party accessed specific folders on company devices over an eleven-day period between March 15, 2023, and March 25, 2023. During this breach window, the intruder obtained files containing sensitive employee information, though the company's systems were not fully compromised. Sur La Table contained the threat upon detection and initiated a comprehensive review of the affected files to determine the scope and nature of the exposed data.

The investigation revealed that compromised files contained confidential employee information including names, driver's license numbers, state identification numbers, and medical or health-related data. The breach did not impact customer information and appeared limited to employee records. Sur La Table completed its review of affected individuals by May 2023 and formally reported the incident to the Maine Attorney General's office on May 24, 2023. On that same date, the company commenced mailing individualized data breach notifications to all affected employees, advising them of the specific information exposed in their cases. The publicly disclosed filing indicated the breach potentially impacted the company's workforce of approximately 1,426 employees across its 50 U.S. retail locations, though the exact number of confirmed victims was not specified in regulatory documents. There was no evidence suggesting misuse of the exposed data prior to notification, and the company did not disclose whether ransomware or extortion attempts were involved in the incident.

Sources

Sources available to members: 1 source.