Rubio's Restaurants, Inc.

The California Office of the Attorney General reported a data breach involving Rubio's Restaurants, Inc. on March 19, 2012. The breach occurred on February 5, 2012, when a CD-ROM containing equity shareholder names and social security numbers was potentially stolen from a BDO USA, LLP employee's vehicle, affecting an unknown number of individuals. A separate incident involving a different CD-ROM containing workers' compensation claim information was also reported, but no sensitive information such as social security numbers was included.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-22725

TPRM report: https://www.rankiteo.com/company/rubios-coastal-grill

"id": "rub116072625",
"linkid": "rubios-coastal-grill",
"type": "Breach",
"date": "2/2012",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Restaurant',
                        'name': "Rubio's Restaurants, Inc.",
                        'type': 'Company'}],
 'attack_vector': 'Physical Theft',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Equity shareholder names',
                                              'Social security numbers']},
 'date_detected': '2012-02-05',
 'date_publicly_disclosed': '2012-03-19',
 'description': "A data breach involving Rubio's Restaurants, Inc. was "
                'reported by the California Office of the Attorney General on '
                'March 19, 2012. The breach occurred on February 5, 2012, when '
                'a CD-ROM containing equity shareholder names and social '
                'security numbers was potentially stolen from a BDO USA, LLP '
                "employee's vehicle, affecting an unknown number of "
                'individuals. A separate incident involving a different CD-ROM '
                "containing workers' compensation claim information was also "
                'reported, but no sensitive information such as social '
                'security numbers was included.',
 'impact': {'data_compromised': ['Equity shareholder names',
                                 'Social security numbers']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': "Data Breach at Rubio's Restaurants, Inc.",
 'type': 'Data Breach',
 'vulnerability_exploited': 'Physical Security'}