Supply chain ⛓ Supply Chain

Rutters Store Third-Party Breach (February 2020)

📅 2020-02-01 🏢 Not disclosed
Primary Source ↗

Incident Details

Rutters store chain reveals malware attacked its POS system. Convenience store company warns that malware collected payment card details as they were being processed. Convenience store chain Rutters has announced that it suffered a security breach, wherein hackers managed to access the company’s network system and install malware that compromised customers’ data. The store chain made its announcement after a “third party” informed the company that there may have been unauthorized access to payment card data. Rutters launched an investigation and notified law enforcement of the breach.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Not disclosed
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2020-02-01 Breach occurred
  2. 2020-02-18 Publicly disclosed