Cyber Incident Victim: Bailey's Inc.
Date:
Dec 2011
Location:
United States of America
Summary
An attacker compromised Bailey's Inc., accessing customer data including payment card details, login credentials, and personal information over several years, affecting approximately 250,000 individuals. The retailer notified affected parties and authorities, engaged security consultants to implement enhanced protections such as server replacements, firewall upgrades, and mandatory password changes to prevent future incidents.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Between December 1, 2011 and January 26, 2016, an attacker gained unauthorized access to Bailey's Inc.'s e-commerce platform, BaileysOnline.com, compromising sensitive customer data. The outdoor equipment retailer initially believed the breach commenced on September 25, 2015 but forensic investigation revealed the intrusion had persisted for over four years. Approximately 250,000 customers had payment card details and personal information exposed, including credit card numbers, cardholder names, CVV codes, expiration dates, physical addresses, phone numbers, email addresses, and website login credentials. Any information customers entered during the online ordering process was potentially compromised. Payment card analysis showed Visa accounted for 64% of exposed cards, MasterCard for 25%, Discover under 6%, and American Express under 5%. The extended breach duration allowed attackers prolonged access to transactional data flowing through the retailer's web infrastructure.
Bailey's Inc. notified affected customers about the theft of their payment and personal information while coordinating with law enforcement agencies and financial institutions including Wells Fargo Bank, MasterCard, Visa, American Express, and Discover. The company engaged cybersecurity consultants who recommended immediate infrastructure changes, leading to server replacements, firewall enhancements, mandatory password resets, and deployment of new website security software. In their breach notice, the Bailey's Team apologized for the incident and stated they had "taken immediate steps to prevent a recurrence," though no specific technical cause for the initial compromise was disclosed. Customers received instructions to monitor financial accounts for fraudulent activity and change their BaileysOnline.com passwords. The retailer's remediation efforts focused on hardening network defenses and restricting access to sensitive customer data fields within their e-commerce environment.