HackingTargetedIDENTITY_BASICLowContained
Furniture Mart USA
bd_27a4603ba17b9531 · schema v1 · pii pii-v1
Full breach record for Furniture Mart USA →Furniture Mart USA notified consumers on January 24, 2025, of a data breach occurring on November 3, 2024. An unknown actor viewed and copied files containing names and variable personal data. The company secured its network, notified law enforcement, and is offering complimentary credit monitoring through IDX. The total number of affected individuals is not explicitly stated in the notice.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4712c04a1d32cb5eIowa State AGfiled 2025-01-24Candidate
- bd_494086341811f39bIndiana State AGfiled 2025-01-24Verified
- bd_71d6e129a39bb436Maine State AGfiled 2025-01-24Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-24-furniture-mart-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2025
- Raw hash
- 7dbb4173a6cdd69c93980c9ef85f53eef0c7c830b1adfd1cc9a0715eb76061be
Reporting entity
- Name
- Furniture Mart USAnorm: furniture mart usa
- Domain
- fm-usa.com
Victim entity
- Name
- Furniture Mart USAnorm: furniture mart usa
- Domain
- fm-usa.com
Incident
- Discovered
- Nov 3, 2024
- Materiality determined
- Jan 24, 2025
- Notification sent
- Jan 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementWill be notifying relevant regulators, as required
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.