HackingRetail & ConsumerRetailStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

BGP, Inc.

bd_0f2bd928251b2cc6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 20, 2023

Filed

Sep 11, 2023

To disclose

8 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for BGP, Inc. →

BGP, Inc. dba Peltz Famous Brand Shoes notified consumers of a data breach where an unauthorized third party accessed an employee account on or about July 19, 2023. The incident exposed names and Social Security numbers. The company engaged forensic specialists, secured the account, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 8 weeks / 53 days

Jul 19, 2023

Begins

Jul 20, 2023

Discovered

Sep 11, 2023

Filed

vs. sector median

1 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_56e6b6df3b9a3d972023-09-11Verified
Massachusetts State AGbd_f5797e2105a34fc82023-09-11Verified

Name: BGP, Inc.
norm: bgp
Domain: peltzshoes.com

Name: BGP, Inc.
norm: bgp
Domain: peltzshoes.com
Also named: BGP, Inc.dba oflegal entity
Peltz Famous Brand Shoesdba oftrade name
Industry: Retail & Consumerllm

Discovered: Jul 20, 2023
Breach occurred: Jul 19, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Sep 11, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Secured the account
Began an investigation into the nature and scope of the activity with the assistance of third-party forensic specialists
Undertook a lengthy and comprehensive review of the impacted data
Implemented additional technical security measures
Reviewing and enhancing existing policies and procedures
Offering access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Changes made: Implemented additional technical security measures designed to prevent and mitigate recurrence
Reviewing and enhancing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGSep 11 · first

Massachusetts State AGSep 11 · first

Vermont State AGSep 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-09-11-bgp-inc-dba-peltz-famous-brand-shoes-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 11, 2023
Raw hash: b151fcbf5cfb785fddf1c6f1d2358c00ef33ad7344ee20dff0444c128d33a75f

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBGP, Inc.

Victim entityBGP, Inc.

Incidentdiscovered Jul 20, 2023

Stated responseSecured the account

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov