HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Fiskars Group

bd_2546ee2e339cdcde · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 26, 2024

Filed

Nov 6, 2024

To disclose

28 weeks

Affected

3state residents only

Linked

8 records

Confidence

65%

Full breach record for Fiskars Group →

Fiskars Group notified Montana residents of a cybersecurity incident where unauthorized actors accessed systems between March 31 and April 8, 2024. The breach compromised names and Social Security numbers. Fiskars discovered the activity on April 26, 2024, engaged forensic experts, notified law enforcement, and offered 24 months of Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d28 weeks discovery → filing

Incident timeline

undetected · 26 days

discovery → filing · 28 weeks / 194 days

Mar 31, 2024

Begins

Apr 26, 2024

Discovered

Nov 6, 2024

Filed

vs. sector median

+18 wks slower

This filing is one of 8 records about the same incident.View merged incident

A leak claim by akira about this victim was first seen 176 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_f93596bcd8001e912024-04-26 · +194dVerified by operator

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_3585e5f80d5ec4cf2024-11-06Verified by operator
Massachusetts State AGbd_43f427ee9b5695042024-11-06Verified by operator
Maine State AGbd_71af1a5813a10fc82024-11-06Verified by operator
Vermont State AGbd_74a709a0860f528d2024-11-06Verified

Show 1 more filing ↓

Indiana State AGbd_9eef7464f82ecc2a2024-11-06Verified by operator

Press reports (1)

Pressakirabd_60af196b5a2894472024-04-26 · +194dCandidate

Name: Fiskars Group
norm: fiskars group
Domain: fiskarsgroup.com

Name: Fiskars Group
norm: fiskars group
Domain: fiskarsgroup.com
Industry: Retail & Consumerllm

Discovered: Apr 26, 2024
Breach occurred: Mar 31, 2024 – Apr 8, 2024
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 6, 2024
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party cybersecurity experts
Notified law enforcement
Changes made: Implemented numerous measures designed to further enhance the security of our systems and data
Offering complimentary 24-month membership of Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(194 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGNov 6 · first

Massachusetts State AGNov 6 · first

Maine State AGNov 6 · first

Vermont State AGNov 6 · first

Indiana State AGNov 6 · first

Montana State AGNov 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/01/Consumer-notification-letter-1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2024
Raw hash: 4643aec6620947bd05c7c3df81b31c84051d9d272af96ad062973c1496c7149a

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Press reports (1)

Reporting entityFiskars Group

Victim entityFiskars Group

Incidentdiscovered Apr 26, 2024

Stated responseEngaged third-party cybersecurity experts

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov