HackingRetail & ConsumerRetailCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

LEISURE TIME PRODUCTS, LLC

bd_58d67b3a11b134e1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 9, 2024

Filed

Mar 24, 2025

To disclose

19 weeks

Affected

9state residents only

Linked

5 filings

Confidence

65%

Full breach record for LEISURE TIME PRODUCTS, LLC →

Leisure Time Products, LLC d/b/a Backyard Discovery notified the NH AG that an unauthorized party accessed its systems on or about Nov 9, 2024. Forensic review on Feb 19, 2025 confirmed a limited number of NH residents' PII (including SSNs) was potentially acquired. Notices sent March 17, 2025 offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 135 days

Nov 9, 2024

Begins

Nov 9, 2024

Discovered

Mar 24, 2025

Filed

vs. sector median

+12 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_cb83bd7e4088659a2025-03-19 · +5dVerified
Maine State AGbd_d69cb40931bde0912025-03-18 · +6dCandidate
Maryland State AGbd_f6a60054402dc4722025-03-18 · +6dVerified
Indiana State AGbd_6e114efa82b071f02025-03-17 · +7dVerified

Name: LEISURE TIME PRODUCTS, LLC
norm: leisure time products

Name: LEISURE TIME PRODUCTS, LLC
norm: leisure time products
Also named: Leisure Time Products, LLCdba oflegal entity
Backyard Discoverydba oftrade name
Industry: Retail & Consumerllm

Discovered: Nov 9, 2024
Breach occurred: Nov 9, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 17, 2025
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Immediately contained the incident
Commenced a thorough investigation
Engaged leading cybersecurity experts
Conducted extensive forensic investigation and internal review
Provided written notification to affected residents
Offered complimentary membership with a credit monitoring service
Changes made: Continually evaluates and modifies practices to enhance security and privacy
Took many precautions to safeguard personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(135 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMar 17 · first

Maine State AG+1d

Maryland State AG+1d

Massachusetts State AG+2d

New Hampshire State AG+7d · this page

Pattern: first filing Mar 17 (IN), last Mar 24 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/leisure-time-products-backyard-discovery-20250324.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2025
Raw hash: 6583a02dc81e6e60c428fd40e0d883486cbf226acf55a410bc8dc870c273bb13

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLEISURE TIME PRODUCTS, LLC

Victim entityLEISURE TIME PRODUCTS, LLC

Incidentdiscovered Nov 9, 2024

Stated responseImmediately contained the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov