HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Wolff-ST, LLC
bd_44280b8c56daa96c · schema v1 · pii pii-v1
Full breach record for Wolff-ST, LLC →Wolff-ST, LLC d/b/a Marmi and Wolff Shoe experienced a data breach involving unauthorized access to its website, marmishoes.com. An attacker injected malicious code between August 29, 2021, and January 31, 2022, to capture customer payment card information and names. The company engaged forensic specialists, removed the code, and notified affected consumers, offering 12 months of credit monitoring.
California clockDiscovered Jan 24, 2022 → Notified Mar 15, 202250d ✓ CA 60-day OK7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4a5ee4da41f89a75Maine State AGfiled 2022-03-16Verified
- bd_9cda88ec18f46579Montana State AGfiled 2022-03-16Verified
- bd_d9c6560da602f800New Hampshire State AGfiled 2022-03-21(5d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-551754
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2022
- Raw hash
- 19116600658fb050fc6408b119cbe3ca4ea3b69e3387460317c5dc09631318b3
Reporting entity
- Name
- Wolff-ST, LLCnorm: wolff st
Victim entity
- Name
- Wolff-ST, LLCnorm: wolff st
Incident
- Discovered
- Jan 24, 2022
- Materiality determined
- —
- Notification sent
- Mar 15, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 50d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 24, 2022→ Notified: Mar 15, 202250d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.