HackingRetail & ConsumerRetailCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

DBH Worldwide, LLC

bd_304f2a82be00bd9a · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 23, 2021

Filed

Mar 16, 2021

To disclose

21 days

Affected

11state residents only

Confidence

65%

Full breach record for DBH Worldwide, LLC →

DBH Worldwide, LLC (d/b/a Design by Humans), owned by Gonzales Park, LLC, experienced unauthorized access to its website between Jan 31 and Feb 10, 2021. The incident was discovered on Feb 23, 2021. 11 New Hampshire residents were notified on March 16, 2021. The company offered 12 months of credit/identity monitoring and implemented enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 23 days

discovery → filing · 21 days

Jan 31, 2021

Begins

Feb 23, 2021

Discovered

Mar 16, 2021

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident

Name: Gonzales Park, LLC
norm: gonzales park

Name: DBH Worldwide, LLC
norm: dbh worldwide
Also named: DBH Worldwide, LLCdba oflegal entity
Design by Humansdba oftrade name
Industry: Retail & Consumerllm

Discovered: Feb 23, 2021
Breach occurred: Jan 31, 2021 – Feb 10, 2021
Undetected for: 23 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 16, 2021
Affected individuals: 11state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched an investigation to immediately isolate and resolve the activity
Investigated whether this suspicious activity involved any unauthorized access to or acquisition of personal information
Offered 12 months of complimentary credit and identity monitoring services
Implemented enhanced security measures to better safeguard personal information
Changes made: Implemented enhanced security measures to better safeguard personal information in our possession and to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gonzales-park-20210316.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 16, 2021
Raw hash: 599a0f1b09e8d015f36769ca7251cf7391eefbc1c321b1156f624fdb22d602a0

Reporting entityGonzales Park, LLC

Victim entityDBH Worldwide, LLC

Incidentdiscovered Feb 23, 2021

Stated responseLaunched an investigation to immediately isolate and resolve the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov