HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumActive
Furniture Mart USA
bd_b505b01282615894 · schema v1 · pii pii-v1
Full breach record for Furniture Mart USA →Furniture Mart USA, a Sioux Falls, SD retailer, notified the Maryland Attorney General of a data event affecting one Maryland resident. The incident involved unauthorized access to systems on November 3, 2024, resulting in the copying of files containing names, Social Security numbers, and medical information. The breach was discovered on November 3, 2024, and confirmed on December 2, 2024. Furniture Mart notified federal law enforcement, provided 12 months of credit monitoring through IDX, and is reviewing security policies. This filing is a supplemental notice.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376235%20%281%29.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2026
- Raw hash
- ade29f9e7af00e0219c40e4cccb193b2731f0016400c25d7c1f62155879e19c6
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Furniture Mart USAnorm: furniture mart usa
- Domain
- fm-usa.com
- Industry
- retail_consumer
Incident
- Discovered
- Nov 3, 2024
- Materiality determined
- —
- Notification sent
- Jan 24, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement regarding the eventNotifying relevant regulators, as required
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 months(536 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.