HackingRetailCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Sears Hometown Stores, Inc.

bd_16e4c3f1e0cd12a9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 24, 2021

Filed

Feb 15, 2022

To disclose

34 weeks

Affected · nationwide

8251 in this filing

Confidence

50%

Full breach record for Sears Hometown Stores, Inc. →2 incidents on file

Sears Hometown Stores, Inc. experienced an external system breach on June 3, 2021, which was discovered on June 24, 2021. The breach resulted in the compromise of names and Social Security numbers. The company notified the single affected Maine resident on August 27, 2021, and offered one year of identity theft monitoring services through Kroll. A total of 825 individuals were affected across all locations.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 24, 2021 → Filed with AG Feb 15, 2022236d ✗ ME AG >90d34 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 21 days

discovery → filing · 34 weeks / 236 days

Jun 3, 2021

Begins

Jun 24, 2021

Discovered

Feb 15, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed825 affectedView incident

Name: Sears Hometown Stores, Inc.
norm: sears hometown stores

Name: Sears Hometown Stores, Inc.
norm: sears hometown stores

Discovered: Jun 24, 2021
Breach occurred: Jun 3, 2021
Undetected for: 21 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 27, 2021
Affected individuals: 825state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 1 year of identity theft monitoring services from Kroll.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(236 days from discovery to filing)
Compliance flags: ME AG >90d · 236dME resident >60d · 64d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 24, 2021
→ Filed with AG: Feb 15, 2022
236d 90 days ME AG >90d
Maine
Discovered: Jun 24, 2021
→ Notified: Aug 27, 2021
64d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 24, 2021 → Filed with AG: Feb 15, 2022	236d	90 days	ME AG >90d
Maine	Discovered: Jun 24, 2021 → Notified: Aug 27, 2021	64d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3ccbe933-6dbe-4d3d-8115-4a92fa3918d5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2022
Raw hash: 14f0b7482d376d2e0daba6c0b3c1fc61020710e8644c72211d756d91f24654b6

Reporting entitySears Hometown Stores, Inc.

Victim entitySears Hometown Stores, Inc.

Incidentdiscovered Jun 24, 2021

Stated responseOffered 1 year of identity theft monitoring services from Kroll.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov