DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedPIIHighContained

SelectBlinds

bd_1923f9007672926f · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 28, 2024

Filed

Oct 31, 2024

To disclose

5 weeks

Affected · nationwide

206,2381,185 in this filing

Linked

13 filings

Confidence

82%
Full breach record for SelectBlinds →2 incidents on file

SelectBlinds, an Arizona-based online retailer, experienced an external system breach (hacking) that began on January 7, 2024 and was discovered on September 28, 2024. The breach affected 206,238 individuals total, including 1,185 Maine residents. Consumer notifications were sent on October 31, 2024. No identity theft protection services were offered.

Maine clockDiscovered Sep 28, 2024 → Filed with AG Oct 31, 202433d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 265 days
discovery → filing · 5 weeks / 33 days

Jan 7, 2024

Begins

Sep 28, 2024

Discovered

Oct 31, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 1d gap

Showing first 10 of 12 linked disclosures.

Filing propagation · 11 filings · 11 states

View merged incident ↗
Vermont State AGOct 31 · first
Delaware State AGOct 31 · first
Montana State AGOct 31 · first
Indiana State AGOct 31 · first
New Hampshire State AGOct 31 · first
California State AGOct 31 · first
South Carolina State AGOct 31 · first
Oregon State AGOct 31 · first
Washington State AGOct 31 · first
Maine State AGOct 31 · first · this page
Massachusetts State AG+1d

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.