HackingRetail & ConsumerRetailCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountLowContained

Bob's Discount Furniture, LLC

bd_41984e56b842b69d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 3, 2024

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

72%

Full breach record for Bob's Discount Furniture, LLC →2 incidents on file

Bob's Discount Furniture detected unauthorized access on September 25, 2024, to a file containing customer information including name, address, email address, phone number, and My Bob's credit card/account numbers. The company engaged a cybersecurity firm, notified law enforcement, implemented additional protocols to prevent unauthorized purchases, and sent notification letters to affected customers on December 3, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 25, 2024

Begins

Dec 3, 2024

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_0a8a5591979b50202024-12-03Candidate
Indiana State AGbd_284aa6e5aa97e4d02024-12-03Verified
New Hampshire State AGbd_507cb7ae3b222a472024-12-03Verified
Massachusetts State AGbd_c6aba9a89d14ed9b2024-12-03Verified

Name: Bob's Discount Furniture, LLC
norm: bob s discount furniture
Domain: bobsdiscountfurniture.com

Name: Bob's Discount Furniture, LLC
norm: bob s discount furniture
Domain: bobsdiscountfurniture.com
Industry: Retail - Furniture
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Sep 25, 2024
Materiality determined: —
Notification sent: Dec 3, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial

During the incident: Immediately implemented response protocols
Took measures to contain the activity
Launched an investigation
Engaged a cybersecurity firm that has assisted other companies with similar situations
Notified law enforcement and are supporting its investigation
Put in place additional protocols to prevent unauthorized purchases
Plan to mail replacement My Bob's Card to affected customers
Changes made: Taken and are taking additional steps to further enhance our existing network security measures
Put in place additional protocols to prevent unauthorized purchases
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 3 · first

Indiana State AGDec 3 · first

New Hampshire State AGDec 3 · first

Massachusetts State AGDec 3 · first

California State AGDec 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-595604
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 3, 2024
Raw hash: da267094816eb2e7ebdd403cea9a288c875957e07d71da5d1bfebcd676f03977

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBob's Discount Furniture, LLC

Victim entityBob's Discount Furniture, LLC

IncidentUnauthorized Access

Stated responseImmediately implemented response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov