HackingStolen CredentialsTargetedPIICREDENTIALSLowContained
WOLVERINE WORLD WIDE, INC.
bd_57168d34794eb3ef · schema v1 · pii pii-v1
Full breach record for WOLVERINE WORLD WIDE, INC. →VF Outdoor, LLC (doing business as Timberland) reported a credential stuffing attack on October 24, 2021, discovered on November 5, 2021. The incident affected 48 individuals total, including 1 Maine resident. Notification was sent electronically on January 19, 2022. No identity theft protection services were offered.
Maine clockDiscovered Nov 5, 2021 → Filed with AG Jan 26, 202282d ⏱ ME AG >30d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed48 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c7c3d48a-1380-45b3-94a4-663f57e0f7bb.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2022
- Raw hash
- f31cfb1fadde4a741b25a4359cfc988bb68df00ddb6941e0db01d9308e6e237d
Reporting entity
- Name
- DLA PIPER LLP (US)norm: dla piper llp us
Victim entity
- Name
- WOLVERINE WORLD WIDE, INC.norm: wolverine world wide
- Domain
- wolverineworldwide.com
Incident
- Discovered
- Nov 5, 2021
- Materiality determined
- —
- Notification sent
- Jan 19, 2022
- Affected individuals
- 48
- Data types
- PIICREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1110 Brute Force
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- ME AG >30d · 82dME resident >60d · 75d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 5, 2021→ Filed with AG: Jan 26, 202282d 30 days (soft) ME AG >30d Maine Discovered: Nov 5, 2021→ Notified: Jan 19, 202275d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.