Supply chain
⛓ Supply Chain
Rutters Store Third-Party Breach (February 2020)
Primary Source ↗Incident Details
Rutters store chain reveals malware attacked its POS system. Convenience store company warns that malware collected payment card details as they were being processed. Convenience store chain Rutters has announced that it suffered a security breach, wherein hackers managed to access the company’s network system and install malware that compromised customers’ data. The store chain made its announcement after a “third party” informed the company that there may have been unauthorized access to payment card data. Rutters launched an investigation and notified law enforcement of the breach.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Not disclosed
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2020-02-01 Breach occurred
- 2020-02-18 Publicly disclosed