HackingRetail & ConsumerRetailCustomer Data InvolvedFinancial accountIdentity (basic)LowContained

Bob's Discount Furniture, LLC

bd_507cb7ae3b222a47 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 25, 2024

Filed

Dec 3, 2024

To disclose

10 weeks

Affected

87state residents only

Linked

5 filings

Confidence

66%

Full breach record for Bob's Discount Furniture, LLC →2 incidents on file

Bob’s Discount Furniture, LLC detected unauthorized access to its computer network on September 25, 2024. The incident affected 87 New Hampshire residents, involving closed-loop store card accounts. The company contained the activity, engaged a cybersecurity firm, notified law enforcement and financial institutions, and enhanced network security controls. Notification letters were mailed on December 3, 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 69 days

Sep 25, 2024

Begins

Sep 25, 2024

Discovered

Dec 3, 2024

Filed

vs. sector median

+2 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_0a8a5591979b50202024-12-03Candidate
Indiana State AGbd_284aa6e5aa97e4d02024-12-03Verified
California State AGbd_41984e56b842b69d2024-12-03Verified
Massachusetts State AGbd_c6aba9a89d14ed9b2024-12-03Verified

Name: Bob's Discount Furniture, LLC
norm: bob s discount furniture
Domain: bobsdiscountfurniture.com

Name: Bob's Discount Furniture, LLC
norm: bob s discount furniture
Domain: bobsdiscountfurniture.com
Industry: Retail & Consumerllm

Discovered: Sep 25, 2024
Breach occurred: Sep 25, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 3, 2024
Affected individuals: 87state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, NH

During the incident: Implemented response protocols
Took measures to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Notified law enforcement
Notified the financial institutions about the incident
Put in place protocols to prevent unauthorized purchases from the accounts involved
Changes made: Taken and is taking additional steps to further enhance its existing network security controls
Plan to mail a replacement My Bob’s Card
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 3 · first

Indiana State AGDec 3 · first

California State AGDec 3 · first

Massachusetts State AGDec 3 · first

New Hampshire State AGDec 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bobs-discount-furniture-20241203.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 3, 2024
Raw hash: e9da45433ad60eff86c2eac8c62e141a6f2fd695554cd623d614a239925adfd1

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBob's Discount Furniture, LLC

Victim entityBob's Discount Furniture, LLC

Incidentdiscovered Sep 25, 2024

Stated responseImplemented response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov