HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Tackle World
bd_82e4f0d4e0121df4 · schema v1 · pii pii-v1
Full breach record for Tackle World →Tackle Warehouse LLC reported an external system breach (hacking) occurring on October 1, 2021, discovered on November 29, 2021. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs). Approximately 1,813,224 individuals were affected, including 2,100 Maine residents. Written notification was sent on December 16, 2021. No identity theft protection services were offered.
Maine clockDiscovered Nov 29, 2021 → Filed with AG Dec 16, 202117d ✓ ME AG ≤30d17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_16baaa9a885e6e71South Carolina State AGfiled 2021-12-16Verified
- bd_17ddfbea8e4fa012Delaware State AGfiled 2021-12-16Candidate
- bd_38f63a36e62a957cCalifornia State AGfiled 2021-12-18(2d gap)Verified
- bd_9fbe5225da8d0273California State AGfiled 2022-04-12(117d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3479bbef-1861-4bb8-a7ff-d9a4225031bf.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 16, 2021
- Raw hash
- 095c74c4ab42c9f78f38aca4daf9669c991245507a340d2a1b41175312ed065a
Reporting entity
- Name
- Tackle Worldnorm: tackle world
- Domain
- tackleworld.com
Victim entity
- Name
- Tackle Worldnorm: tackle world
- Domain
- tackleworld.com
Incident
- Discovered
- Nov 29, 2021
- Materiality determined
- —
- Notification sent
- Dec 16, 2021
- Affected individuals
- 1,813,224
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 29, 2021→ Filed with AG: Dec 16, 202117d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.