HackingRetail & ConsumerRetailCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

STRAUSS BRANDS LLC

bd_6d983000c54f96dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 20, 2024

Filed

Mar 19, 2025

To disclose

39 weeks

Affected

9state residents only

Linked

5 filings

Confidence

66%

Full breach record for STRAUSS BRANDS LLC →

Strauss Brands LLC notified the Maryland AG of a data security incident affecting 9 Maryland residents. Unauthorized access occurred between June 11-20, 2024. Impacted data included names, SSNs, driver's licenses, financial account numbers, and medical/health insurance information. Strauss engaged law enforcement and third-party specialists, implemented technical safeguards, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d39 weeks discovery → filing

Incident timeline

undetected · 9 days

discovery → filing · 39 weeks / 272 days

Jun 11, 2024

Begins

Jun 20, 2024

Discovered

Mar 19, 2025

Filed

vs. sector median

+31 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_6b5e9200398004f32024-07-07 · +255dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_0705e7b417b707112025-03-19Verified
Nebraska State AGbd_a9b93b9fb78410052025-03-19Verified
Massachusetts State AGbd_5b6373e6d201d0092025-03-20 · +1dVerified by operator

Name: STRAUSS BRANDS LLC
norm: strauss brands
Domain: straussbrands.com

Name: STRAUSS BRANDS LLC
norm: strauss brands
Domain: straussbrands.com
Industry: Retail & Consumerllm

Discovered: Jun 20, 2024
Breach occurred: Jun 11, 2024 – Jun 20, 2024
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 19, 2025
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Office of the Attorney General

During the incident: Contacted law enforcement
Engaged third-party specialists to assist with determining the nature and scope of the event
Took steps to secure its network environment
Undertook a thorough investigation
Began providing notice to the potentially impacted individuals on March 19, 2025 via U.S. mail
Changes made: Implemented additional technical safeguards to further enhance the security of information in its possession
Offering the potentially impacted individuals 12 months of complimentary credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(272 days from discovery to filing)
Compliance flags: MD AG >90dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMar 19 · first

Nebraska State AGMar 19 · first

Maryland State AGMar 19 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376574.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2025
Raw hash: 51de6c481380de5ad7f94fb5b54df8dd3c80b920530c5a9392ef32415dff47cb

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entitySTRAUSS BRANDS LLC

Victim entitySTRAUSS BRANDS LLC

Incidentdiscovered Jun 20, 2024

Stated responseContacted law enforcement

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov