HackingRetail & ConsumerRetailCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

OBI Seafoods, LLC

bd_b4a8705c32c342ef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 16, 2024

Filed

Mar 19, 2025

To disclose

31 weeks

Affected

17state residents only

Linked

11 filings

Confidence

66%

Full breach record for OBI Seafoods, LLC →

OBI Seafoods, LLC notified the Maryland AG of a security incident discovered August 16, 2024, affecting 17 Maryland residents. The breach involved personal information of current/former workers and vendors, including names, SSNs, DOBs, medical info, and bank account details. OBI engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d31 weeks discovery → filing

Incident timeline

discovery → filing · 31 weeks / 215 days

Aug 16, 2024

Discovered

Mar 19, 2025

Filed

vs. sector median

+21 wks slower

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Washington State AGbd_2e2bc0ba4ccc39ed2025-03-19Candidate
California State AGbd_588d4831a4ef495a2025-03-19Verified
Maine State AGbd_683f27165a0de4b32025-03-19Verified
Montana State AGbd_9ea0ce820edd92112025-03-19Verified

Show 6 more filings ↓up to 7d gap

Oregon State AGbd_b4dd57c9e5fc45952025-03-19Verified
Massachusetts State AGbd_78f0eba83af222af2025-03-20 · +1dVerified
New Hampshire State AGbd_8f7fd5662095a6c72025-03-20 · +1dVerified
Vermont State AGbd_d2ab5e8bbc7cb5c72025-03-20 · +1dVerified
Indiana State AGbd_91e5af3efa2d068b2025-03-12 · +7dVerified
Nebraska State AGbd_f5e39d93cf18d8372025-03-12 · +7dVerified

Name: Troutman Pepper Locke, LLP
norm: troutman pepper locke

Name: OBI Seafoods, LLC
norm: obi seafoods
Industry: Retail & Consumerllm

Discovered: Aug 16, 2024
Materiality determined: —
Notification sent: Mar 12, 2025
Affected individuals: 17state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcement

During the incident: Took steps to secure its systems
Engaged external cybersecurity specialists to assist with the investigation
Notified federal law enforcement of the incident
Provided proactive notice of the incident to current employees of OBS and OBI via letter
Offered complimentary credit monitoring services
Began formally notifying individuals through website and media notices
Opened a call center to address questions
Providing notice to affected individuals whose address information was available via U.S. letter mail
Offering 24 months of complimentary credit monitoring and identity protection services
Changes made: Offering 24 months of complimentary credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(215 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Indiana State AGMar 12 · first

Nebraska State AGMar 12 · first

Washington State AG+7d

California State AG+7d

Maine State AG+7d

Montana State AG+7d

Oregon State AG+7d

Maryland State AG+7d · this page

Massachusetts State AG+8d

New Hampshire State AG+8d

Vermont State AG+8d

Pattern: first filing Mar 12 (IN), last Mar 20 (VT) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376570.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2025
Raw hash: cf4cafe3ec97430756ab4ade64edc9bd6e55e9b8ed7eeeeed58bb5b6210d378f

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityTroutman Pepper Locke, LLP

Victim entityOBI Seafoods, LLC

Incidentdiscovered Aug 16, 2024

Stated responseTook steps to secure its systems

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov