Bath Fitter Distributing Inc.
bd_2e7b0e218cf7dbfd · schema v1 · pii pii-v2
Full breach record for Bath Fitter Distributing Inc. →2 incidents on fileBath Fitter Distributing Inc experienced a ransomware incident between December 4-5, 2024, discovered on December 5, 2024. A threat actor impersonated an IT technician to gain network access, deploy ransomware, encrypt files, and potentially exfiltrate data. The breach affected current and former employees, exposing SSNs, driver's licenses, passport numbers, financial account numbers, and health information. The company isolated the network, disabled remote access, built a new network, and offered two years of free credit monitoring via CyEx. Formal notification was sent on March 7, 2025.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 4, 2024
Begins
Dec 5, 2024
Discovered
Apr 23, 2025
Filed
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Massachusetts State AGbd_f35ec7e382df7bfd2025-04-24 · +1dVerified
- Maine State AGbd_fb709bb811158e6e2025-04-22 · +1dCandidate
- Indiana State AGbd_25a4eb9673b878852025-04-18 · +5dVerified
- New Hampshire State AGbd_470885952a8d29802025-04-15 · +8dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Apr 15 (NH), last Apr 24 (MA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.