HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Decks & Docks Company

bd_6bbb8dccdf77a77f · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2024

Filed

Dec 11, 2024

To disclose

6 weeks

Affected

1state residents only

Confidence

64%

Full breach record for Decks & Docks Company →

Decks & Docks Company notified one New Hampshire resident on December 11, 2024, of a data incident involving suspicious activity in its email tenant. The company investigated, assessed security, and is offering 12 months of complimentary Experian credit monitoring. The incident involved unauthorized access to email accounts.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Nov 1, 2024

Discovered

Dec 11, 2024

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Decks & Docks Company
norm: decks docks

Name: Decks & Docks Company
norm: decks docks
Industry: Retail & Consumerllm

Discovered: Nov 1, 2024
Materiality determined: —
Notification sent: Dec 11, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Providing written notice of this incident to relevant state regulators
Initial access: valid_credentials

During the incident: Moved quickly to investigate and respond to the potential incident
Assessed the security of their systems
Identified potentially affected individuals
Reviewing its policies, procedures, and processes related to the handling of sensitive information
Providing access to credit monitoring services for through Experian to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators
Changes made: Reviewing its policies, procedures, and processes related to the handling of sensitive information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/decks-docks-20241211.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2024
Raw hash: 1bad28e9cd768b525ff30133e84d716537719f57f92b97746daf1de3b27f6370

Reporting entityDecks & Docks Company

Victim entityDecks & Docks Company

Incidentdiscovered Nov 1, 2024

Stated responseMoved quickly to investigate and respond to the potential incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov