HackingRetail & ConsumerRetailVulnerability ExploitCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsLowContained

BASSETT FURNITURE INDUSTRIES INC

bd_02fbfffce87a6eeb · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 22, 2023

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for BASSETT FURNITURE INDUSTRIES INC →2 incidents on file

Bassett Furniture Industries disclosed that an unauthorized actor gained access to its e-commerce website between July 29, 2021, and April 27, 2023, adding code potentially capable of capturing customer information during online orders. The investigation concluded on August 21, 2023. Potentially affected data includes names, billing addresses, payment card numbers, CVV codes, and expiration dates. The company engaged third-party cybersecurity specialists and is offering 12 months of credit monitoring and identity restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 29, 2021

Begins

Sep 22, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_24653a70a0d0d4e72023-09-22Verified
Montana State AGbd_67e96fb6743a47842023-09-22Verified
Indiana State AGbd_84c1587c69f976282023-09-22Verified
Vermont State AGbd_c0f90f75baae0abe2023-09-22Verified

Show 2 more filings ↓

Maine State AGbd_e2a4d8b329957e702023-09-22Candidate
New Hampshire State AGbd_f5626a67e85caeeb2023-09-22Verified

Name: BASSETT FURNITURE INDUSTRIES INC
norm: bassett furniture
Domain: bassettfurniture.com

Name: BASSETT FURNITURE INDUSTRIES INC
norm: bassett furniture
Domain: bassettfurniture.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jul 29, 2021 – Apr 27, 2023
Materiality determined: —
Notification sent: Sep 22, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched an investigation with the assistance of third-party cybersecurity specialists
Assessed the security of our systems and e-commerce website
Offering credit monitoring and identity restoration services through IDX for twelve (12) months, at no cost to you
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Massachusetts State AGSep 22 · first

Montana State AGSep 22 · first

Indiana State AGSep 22 · first

Vermont State AGSep 22 · first

Maine State AGSep 22 · first

New Hampshire State AGSep 22 · first

California State AGSep 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-574059
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2023
Raw hash: 74b4a3eae4edb3cf1e81422f2fcccdea8794f3a6a5213803321ef610f8def02f

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBASSETT FURNITURE INDUSTRIES INC

Victim entityBASSETT FURNITURE INDUSTRIES INC

IncidentUnauthorized Access

Stated responseLaunched an investigation with the assistance of third-party cybersecurity specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov