DisclosureLens
MalwareRetail & ConsumerRetailRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedTargetedGovernment IDIdentity (basic)Financial accountHealth (basic)EmploymentMediumContained

Bath Fitter Distributing Inc.

bd_2e7b0e218cf7dbfd · schema v1 · pii pii-v2

Severity

Medium

Discovered

Dec 5, 2024

Filed

Apr 23, 2025

To disclose

Affected

Not disclosed

Linked

5 filings

Confidence

65%
Full breach record for Bath Fitter Distributing Inc.2 incidents on file

Bath Fitter Distributing Inc experienced a ransomware incident between December 4-5, 2024, discovered on December 5, 2024. A threat actor impersonated an IT technician to gain network access, deploy ransomware, encrypt files, and potentially exfiltrate data. The breach affected current and former employees, exposing SSNs, driver's licenses, passport numbers, financial account numbers, and health information. The company isolated the network, disabled remote access, built a new network, and offered two years of free credit monitoring via CyEx. Formal notification was sent on March 7, 2025.

Incident timeline

undetected · 1 days

Dec 4, 2024

Begins

Dec 5, 2024

Discovered

Apr 23, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
New Hampshire State AGApr 15 · first
Nebraska State AG+8d · this page

Pattern: first filing Apr 15 (NH), last Apr 24 (MA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.