Westbridge Department Stores · Black Friday incident bridge · Black Friday · 06:05–10:20 UTC
Protect the customer behind every transaction. Make reopening an evidence-based decision.
The queues are growing. The tills still work. Follow a payment incident from the first alert to the reopening vote.
Lead a fictional retailer through three progressive Black Friday incident missions, approximately 70 minutes in total. Inspired by Target's 2013 payment-card breach, which included Black Friday, with original synthetic evidence rather than a reconstruction of its private systems. Reconcile copied alerts and independent observations, choose a collection route, verify that vendor-derived access actually stops, reconcile pending payments and account for an offline register before recommending restricted checkout or a continued hold. Three distinct badges, animated briefings, consequential branches, an evidence-changing spare-register variant and a reusable retail response worksheet. Each level requires the previous mission. Basic incident-response familiarity helps; all required topology, authority and payment assumptions are supplied. Included in Solo Missions (€20/month total) and eligible Teams membership, with no separate campaign fee. Runs in the HTML5 player: no terminal, real card data, exploit, external account or live system. Chapters supply fixed checkpoints; earlier choices remain in their records rather than changing later evidence. Durations are reading/practice estimates, not countdowns. This is guided decision practice, not PCI compliance certification. Narration appears only where validated audio exists.
06:05 UTC. Black Friday queues are building at fictional Westbridge. Two checkout alerts have reached Maya's incident bridge while sales continue. You are the duty analyst: preserve the right evidence, decide what the observations justify and recommend a checkout posture that protects customers. Store owners execute changes. This chapter supplies its own checkpoint; no real payment records are used.
07:10 UTC. Westbridge has contained the first checkout path, but a vendor gateway still has a warm session and a derived relay credential. Maya asks you to close the authority gap without guessing who used the account. Compare the topology, revoke the right access and prove that the controls took effect. This is a fixed checkpoint independent of your earlier checkout choice.
Complete the previous level to unlock.
09:00 UTC. The queues have become a board-level issue. Westbridge's recovery screen is green, but its physical ledger includes a spare register that disappeared from the online count. As recovery adviser, reconcile the supplied inventory variant, protect unresolved payments and recommend either a bounded checkout pilot or an owned hold. Every approval needs a serial, a receipt and a limit.
Complete the previous level to unlock.