HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
PUMA North America, Inc.
bd_2f6215e58a3bea96 · schema v1 · pii pii-v1
Full breach record for PUMA North America, Inc. →PUMA North America, Inc. reported an external system breach (hacking) occurring on 12/11/2021, discovered on 01/10/2022. The incident affected 6,632 individuals, including 17 Maine residents. Acquired data included names and Social Security Numbers. PUMA provided written notification and offered two years of credit monitoring and identity protection services through Experian.
Maine clockDiscovered Jan 10, 2022 → Filed with AG Feb 3, 202224d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_19ebc5a096f4e012California State AGfiled 2022-02-03Verified
- bd_52794aa715649334New Hampshire State AGfiled 2022-02-08(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/10394643-6f4e-49ff-884a-9977602932a9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2022
- Raw hash
- 7e2be77ef99951d7e59c129a32ac084a7bceecec6bbb6b0c7965c98827e92ad2
Reporting entity
- Name
- MORGAN, LEWIS & BOCKIUS LLPnorm: morgan lewis bockius
Victim entity
- Name
- PUMA North America, Inc.norm: puma north america
Incident
- Discovered
- Jan 10, 2022
- Materiality determined
- —
- Notification sent
- Feb 3, 2022
- Affected individuals
- 6,632
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 10, 2022→ Filed with AG: Feb 3, 202224d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.