HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowContained
Aaron's, LLC
bd_bec102cefef67463 · schema v1 · pii pii-v1
Full breach record for Aaron's, LLC →Smith Gambrell & Russell, LLP (SGR) filed a supplemental notice with the New Hampshire Attorney General regarding a data breach affecting Aaron's, LLC clients. Unauthorized access occurred July 19-28, 2021. SGR discovered the incident on August 9, 2021. 170 New Hampshire residents were notified on December 13, 2022. Impacted data included names. SGR engaged forensic investigators, reset passwords, and provided credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed170 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/smith-gambrell-russell-20221213.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2022
- Raw hash
- e493b4ec6f02b8852f1d59c99487853027ec05c3b0de704ec9526885553ea997
Reporting entity
- Name
- SMITH GAMBRELL & RUSSELL LLPnorm: smith gambrell russell
- Domain
- sgrlaw.com
Victim entity
- Name
- Aaron's, LLCnorm: aaron s
Incident
- Discovered
- Aug 9, 2021
- Materiality determined
- Nov 16, 2022
- Notification sent
- Dec 13, 2022
- Affected individuals
- 170
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- originally notified you on August 8, 2022provided an update on September 28, 2022notified and is cooperating with law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(491 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.