MalwareRetail & ConsumerTechnologyRetailRansomwareData ExfiltratedTargetedIdentity (basic)Financial accountCredentialsLowActive

LaCie USA

bd_329568d2cb35f19f · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 19, 2014

Filed

Apr 11, 2014

To disclose

23 days

Affected

114state residents only

Linked

3 filings

Confidence

66%

Full breach record for LaCie USA →

LaCie USA notified the NH AG that malware was used to access customer transaction data from March 2013 to March 2014. Affected data includes names, addresses, emails, payment card numbers, and passwords. 114 NH residents notified. Investigation ongoing with FBI cooperation.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 357 days

discovery → filing · 23 days

Mar 27, 2013

Begins

Mar 19, 2014

Discovered

Apr 11, 2014

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_8b3981ee80a37b392014-04-11Candidate
Massachusetts State AGbd_1e646a811f7b559b2014-04-14 · +3dVerified

Name: LaCie USA
norm: lacie usa

Name: LaCie USA
norm: lacie usa
Industry: Retail & ConsumerllmTechnologyllm

Discovered: Mar 19, 2014
Breach occurred: Mar 27, 2013 – Mar 10, 2014
Undetected for: 357 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 11, 2014
Affected individuals: 114state-resident count only
Data types: Identity (basic)Financial accountCredentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified FBI
Initial access: exploit_public_facing

During the incident: Engaged a leading forensic investigation firm
Implementing additional security measures
Providing a dedicated call center for affected individuals
Requiring a reset of all passwords
Cooperating with federal authorities
Changes made: Implementing additional security measures with forensic firm
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGApr 11 · first

New Hampshire State AGApr 11 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lacie-usa-20140411.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 11, 2014
Raw hash: 0078326658a74fb12ff25401008c347c8b1ec04455f110a292e0e328ceeba0d5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLaCie USA

Victim entityLaCie USA

Incidentdiscovered Mar 19, 2014

Stated responseEngaged a leading forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov