HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Enesco Parent, LLC

bd_becc40e3c0107302 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 13, 2021

Filed

Nov 12, 2021

To disclose

13 weeks

Affected

5state residents only

Linked

6 filings

Confidence

66%

Full breach record for Enesco Parent, LLC →

Enesco, LLC notified Montana residents of a network security incident detected on August 13, 2021. An unauthorized third party infiltrated the network, potentially exposing names, addresses, birthdates, SSNs, and bank account information. Enesco secured the network, engaged forensic investigators, and provided credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 91 days

Aug 13, 2021

Discovered

Nov 12, 2021

Filed

vs. sector median

+5 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_4127c848810fecee2021-11-12Verified
New Hampshire State AGbd_bd431d7735ada5712021-11-12Verified
Massachusetts State AGbd_ef489b293dee96d12021-11-12Verified
Indiana State AGbd_ce7a7b55559361c52021-11-02 · +10dVerified

Show 1 more filing ↓up to 315d gap

Illinois State AGbd_9721e2154db0ce982021-01-01 · +315dCandidate

Name: Enesco Parent, LLC
norm: enesco parent

Name: Enesco Parent, LLC
norm: enesco parent
Industry: Retail & Consumerllm

Discovered: Aug 13, 2021
Materiality determined: —
Notification sent: Nov 2, 2021
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Initial access: exploit_public_facing

During the incident: Shut off access to the network
Engaged specialized third-party forensic and technical resources
Secured and remediated its network and the data that we maintain
Conducted an investigation with the assistance of third-party forensic specialists
Reviewed and altered tools and procedures relating to the security of our systems and servers
Secured free identity protection services, including credit monitoring services and identity theft protection services through IDX
Changes made: Reviewed and altered tools and procedures relating to the security of our systems and servers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(91 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+305d

Maine State AG+315d

New Hampshire State AG+315d

Massachusetts State AG+315d

Montana State AG+315d · this page

Pattern: first filing Jan 1 (IL), last Nov 12 (MT) — a 315-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-76.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2021
Raw hash: 37b903eaa388679c56a49afdc5f4ddee097c15db0e977645fc0f1fb1010d584d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityEnesco Parent, LLC

Victim entityEnesco Parent, LLC

Incidentdiscovered Aug 13, 2021

Stated responseShut off access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov