HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Belle Tire

bd_24424444156851dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 11, 2024

Filed

Nov 4, 2024

To disclose

21 weeks

Affected

6state residents only

Linked

8 filings

Confidence

66%

Full breach record for Belle Tire →

Belle Tire notified the NH AG of a data security incident affecting 6 NH residents. The company identified unauthorized system activity on June 11, 2024. A cybercriminal accessed and copied personal data. Belle Tire engaged third-party investigators, contacted law enforcement, and notified residents on Oct 31, 2024, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d21 weeks discovery → filing

Incident timeline

discovery → filing · 21 weeks / 146 days

Jun 11, 2024

Discovered

Sep 11, 2024

Scope determined

Nov 4, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 8 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 147 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteplaybd_1e59c306a79f88462024-06-11 · +146dVerified by operator
Leak Siteplaybd_4b98cac8c78be8872024-06-10 · +147dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_50fae7c876688eb82024-11-05 · +1dVerified
Maine State AGbd_fdc98955fe6e10642024-11-02 · +2dVerified
Illinois State AGbd_e72e6f209d7477812024-11-01 · +3dVerified
Indiana State AGbd_ffe51c9941f4907f2024-10-31 · +4dVerified

Show 1 more filing ↓up to 5d gap

Montana State AGbd_a59b4b486ee42ade2024-10-30 · +5dCandidate

Name: Belle Tire
norm: belle tire
Domain: belletire.com

Name: Belle Tire
norm: belle tire
Domain: belletire.com
Industry: Retail & Consumerllm

Discovered: Jun 11, 2024
Materiality determined: Sep 11, 2024
Notification sent: Oct 31, 2024
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took steps to stop that activity
Hired a third-party team to investigate and assist us
Contacted law enforcement
Notified the New Hampshire residents of the incident by U.S. mail
Offering affected individuals complimentary identity theft protection and credit monitoring services through Experian IdentityWorks
Changes made: Working to add protections to its computer systems in an effort to prevent this from happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(146 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGOct 30 · first

Indiana State AG+1d

Illinois State AG+2d

Maine State AG+3d

New Hampshire State AG+5d · this page

Massachusetts State AG+6d

Pattern: first filing Oct 30 (MT), last Nov 5 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/belle-tire-20241104.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 4, 2024
Raw hash: 1d1afc83a1b08573cbb2277aa4fb8d5be4e328d8c643a0a4549e30c48e9919ec

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityBelle Tire

Victim entityBelle Tire

Incidentdiscovered Jun 11, 2024

Stated responseTook steps to stop that activity

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov