HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
MarineMax, Inc.
bd_29639741801d07d3 · schema v1 · pii pii-v1
Full breach record for MarineMax, Inc. →MarineMax, Inc. reported a cybersecurity incident to the New Hampshire Attorney General. Unauthorized access occurred between March 1 and March 10, 2024, discovered on March 10, 2024. The incident affected 448 New Hampshire residents, exposing personal information. MarineMax engaged forensic experts, notified the FBI, and offered credit monitoring via Experian to affected individuals.
Leak gap clock⏱ Leak >90d18 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 128 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0f878f76066c5f22Indiana State AGfiled 2024-07-16Verified
- bd_8fa0e6de8ec422e1Vermont State AGfiled 2024-07-16Verified
- bd_fb1d2c8bf0d356b1Montana State AGfiled 2024-07-16Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/marinemax-20240716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2024
- Raw hash
- b2a4e01af7604c1595b6b998276a245c9afc4d89ce84cf34696c849cf869b389
Reporting entity
- Name
- MarineMax, Inc.norm: marinemax
- Domain
- marinemax.com
Victim entity
- Name
- MarineMax, Inc.norm: marinemax
- Domain
- marinemax.com
Incident
- Discovered
- Mar 10, 2024
- Materiality determined
- —
- Notification sent
- Jul 16, 2024
- Affected individuals
- 448
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(128 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.