DisclosureLens
HackingRetail & ConsumerRetailTargetedCustomer Data InvolvedIdentity (basic)LowContained

O'Neill Wetsuits, L.L.C.

bd_c0ac88cd3e5e8222 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 25, 2025

Filed

May 23, 2025

To disclose

12 weeks

Affected · nationwide

5742 in this filing

Linked

3 filings

Confidence

66%
Full breach record for O'Neill Wetsuits, L.L.C.

O'Neill Wetsuits, L.L.C. reported an external system breach (hacking) occurring Feb 23-25, 2025. The incident affected 574 individuals, including 2 Maine residents. The company took systems offline, engaged third-party experts, and notified law enforcement. Affected data included names and personal identifiers. Identity theft protection services were offered.

Maine clockDiscovered Feb 25, 2025Filed with AG May 23, 202587d ME AG >30d12 weeks discovery → filing
unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 2 days
discovery → filing · 12 weeks / 87 days

Feb 23, 2025

Begins

Feb 25, 2025

Discovered

May 23, 2025

Filed

vs. sector median

+5 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
New Hampshire State AGMay 23 · first
Massachusetts State AGMay 23 · first
Maine State AGMay 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.