HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)MediumContained

ShoreMaster

bd_78f7cac5abf76da2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 30, 2024

Filed

Nov 26, 2024

To disclose

8 weeks

Affected · nationwide

1,0082 in this filing

Linked

4 filings

Confidence

65%

Full breach record for ShoreMaster →

ShoreMaster, LLC reported a data breach affecting 1,008 individuals, including 2 Maine residents. Unauthorized access occurred on August 5, 2024, discovered on September 30, 2024. First and last names were compromised. ShoreMaster engaged third-party specialists, secured systems, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 30, 2024 → Filed with AG Nov 26, 202457d ⏱ ME AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 56 days

discovery → filing · 8 weeks / 57 days

Aug 5, 2024

Begins

Sep 30, 2024

Discovered

Nov 26, 2024

Filed

vs. sector median

+1 wks slower

This filing is one of 4 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 113 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteakirabd_ea673e42df165b5a2024-10-01 · +55dVerified by operator
Leak Siteakirabd_56cbd39f976672842024-08-05 · +113dVerified by operator

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_5e145e638d7929ac2024-11-26Verified

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: ShoreMaster
norm: shoremaster
Domain: shoremaster.com
Industry: Retail & Consumerllm

Discovered: Sep 30, 2024
Breach occurred: Aug 5, 2024
Undetected for: 56 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 26, 2024
Affected individuals: 1,008state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with understanding the nature and scope of the disruption
Secured systems
Offered 12 months of complimentary credit monitoring and identity theft protection services through TransUnion
Changes made: Working to implement additional measures to further enhance the security of the network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: ME AG >30d · 57dLeak >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 30, 2024
→ Filed with AG: Nov 26, 2024
57d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 30, 2024 → Filed with AG: Nov 26, 2024	57d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGNov 26 · first

Maine State AGNov 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/73abd9b1-7c85-4faf-8e65-b67ce83a1fa3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2024
Raw hash: c5ae56b7edd90e0f042433844a2471f0d8d9d42ee183145eeeb7a83f650f2992

Linked disclosures

Ransomware claims (2)

Regulatory filings (1) · sorted by filing gap

Reporting entityCipriani & Werner

Victim entityShoreMaster

Incidentdiscovered Sep 30, 2024

Stated responseEngaged third-party specialists to assist with understanding the nature and scope of the disruption

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov