HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Morton Golf LLC

bd_54d704d5e9f0c634 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 31, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Morton Golf LLC →

Morton Golf LLC experienced unauthorized access to its network on or about January 14, 2025. The company secured the network and engaged external cybersecurity professionals. A forensic investigation determined on February 24, 2025, that an unauthorized individual may have removed files containing names and other personal information. The company is offering 12 months of credit monitoring and identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 13, 2025

Begins

Mar 31, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Nebraska State AGbd_07745280454c4bab2025-03-31Verified

Name: Morton
norm: morton
Domain: mortons.com

Name: Morton Golf LLC
norm: morton golf
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 13, 2025 – Jan 14, 2025
Materiality determined: —
Notification sent: Mar 31, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Commenced a prompt and thorough investigation
Secured the network
Working very closely with external cybersecurity professionals experienced in handling these types of incidents
Conducted extensive forensic investigation and manual document review
Offering identity theft protection services through I include 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services
Established a dedicated and confidential toll-free response line
Changes made: Continually evaluates and modifies our practices to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Nebraska State AGMar 31 · first

California State AGMar 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-600645
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2025
Raw hash: addb3b0905b7cce6de304d6f52ef82a8ba034f819d27fb7c59feceab70cd8f61

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMorton

Victim entityMorton Golf LLC

IncidentUnknown

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov