Steyr Arms USA
bd_3b30440de11539cd · schema v1 · pii pii-v1
Full breach record for Steyr Arms USA →Steyr Arms, Inc. notified the NH Attorney General of a data breach involving unauthorized access to customer and payment card information via a malicious Google Tag Manager code implanted on its website. The incident affected purchases made between June 15 and August 24, 2022. Ten New Hampshire residents were identified as impacted. Steyr Arms removed the code, engaged forensic experts, and offered one year of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 15, 2022
Begins
Aug 1, 2022
Discovered
Nov 17, 2022
Scope determined
Dec 15, 2022
Filed
vs. sector median
+10 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Maine State AGbd_192deead428caaef2022-12-21 · +6dCandidate
- Massachusetts State AGbd_94accb664517d49c2022-12-21 · +6dVerified
- Indiana State AGbd_f15f39039fd393c02022-12-21 · +6dVerified
- Montana State AGbd_f339d5920f75b70e2022-12-21 · +6dVerified by operator
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Dec 15 (NH), last Dec 21 (MT) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.