HackingHacking OtherCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Wolff-ST, LLC
bd_4a5ee4da41f89a75 · schema v1 · pii pii-v1
Full breach record for Wolff-ST, LLC →Wolff-ST, LLC, operating as Marmi and Wolff Shoe, reported a data breach where malicious code was added to their website, marmishoes.com. This external hacking incident led to the compromise of customer names and financial account information, including credit/debit card numbers with their security codes. The breach occurred on August 29, 2021, and was discovered on February 24, 2022. The company notified the 15 affected Maine residents on March 15, 2022, and offered them 12 months of complimentary identity theft protection and credit monitoring services through TransUnion.
Maine clockDiscovered Feb 24, 2022 → Filed with AG Mar 16, 202220d ✓ ME AG ≤30d20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_44280b8c56daa96cCalifornia State AGfiled 2022-03-16Candidate
- bd_9cda88ec18f46579Montana State AGfiled 2022-03-16Verified
- bd_d9c6560da602f800New Hampshire State AGfiled 2022-03-21(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/80ae82bd-c191-4148-9935-ae6698095d5f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2022
- Raw hash
- 80202f06925790ef22ad8a98e40ab76c38a2145898d4ffa2b1358b33891a6c86
Reporting entity
- Name
- Wolff-ST, LLCnorm: wolff st
Victim entity
- Name
- Wolff-ST, LLCnorm: wolff st
Incident
- Discovered
- Feb 24, 2022
- Materiality determined
- —
- Notification sent
- Mar 15, 2022
- Affected individuals
- 15
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 24, 2022→ Filed with AG: Mar 16, 202220d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.