HackingHacking OtherCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
Jacuzzi Inc.
bd_4fe807af058751a0 · schema v1 · pii pii-v1
Full breach record for Jacuzzi Inc. →Jacuzzi Inc. experienced an external system breach on December 15, 2020, which was also the date of discovery. The breach compromised names or other personal identifiers in combination with financial account numbers or credit/debit card numbers, along with their security codes, access codes, passwords, or PINs. A total of 5,684 individuals were affected, including one resident of Maine. Consumers were notified on February 23, 2021. The company offered two years of credit monitoring, fraud consultation, and identity theft restoration services through Kroll.
Maine clockDiscovered Dec 15, 2020 → Filed with AG Feb 23, 202170d ⏱ ME AG >30d10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f72c1dedb87e6b5bMontana State AGfiled 2021-02-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8fb48dc4-b174-4d80-bace-88d403e1a1bc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2021
- Raw hash
- c1cddf5d737709527fcb805d8b4a5fc6d97829ce9a53307f0a30d42e45179474
Reporting entity
- Name
- Jacuzzi Inc.norm: jacuzzi
Victim entity
- Name
- Jacuzzi Inc.norm: jacuzzi
Incident
- Discovered
- Dec 15, 2020
- Materiality determined
- —
- Notification sent
- Feb 23, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 70d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 15, 2020→ Filed with AG: Feb 23, 202170d 30 days (soft) ME AG >30d Maine Discovered: Dec 15, 2020→ Notified: Feb 23, 202170d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.