HackingRetail & ConsumerRetailStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedPIILowContained
Shoe Show, Inc.
bd_32dd9779ebf90577 · schema v1 · pii pii-v1
Full breach record for Shoe Show, Inc. →Shoe Show, Inc. reported an external unauthorized party gained access to an employee email account between June 28 and July 6, 2024. The breach was discovered on August 15, 2024. The account contained personal information including names and other personal data elements. 18 Maine residents were among 12,856 total individuals affected. Affected individuals were offered 12-month Equifax Complete Premier identity protection services.
Maine clockDiscovered Aug 15, 2024 → Filed with AG Oct 9, 202455d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_060c9585a014b405New Hampshire State AGfiled 2024-10-09Verified
- bd_16d120edd8d3cf21Montana State AGfiled 2024-10-09Candidate
- bd_c203bfa8fd583281Indiana State AGfiled 2024-10-09Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d250e712-a925-49b4-91bc-d2fa48cf0eb6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2024
- Raw hash
- de36b84ce6d727ae40c509a65b3c5cf5f298919d3d5ae6939792946fe028b475
Reporting entity
- Name
- Shoe Show, Inc.norm: shoe show
- Industry
- Other Commercial
Victim entity
- Name
- Shoe Show, Inc.norm: shoe show
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Aug 15, 2024
- Materiality determined
- —
- Notification sent
- Oct 9, 2024
- Affected individuals
- 18
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- ME AG >30d · 55d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 15, 2024→ Filed with AG: Oct 9, 202455d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.