MalwareRetail & ConsumerRetailRansomwareData ExfiltratedTargetedFinancial accountIdentity (basic)LowContained

SIMMS FISHING PRODUCTS LLC

bd_cf91238a76652844 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 2, 2021

Filed

Apr 12, 2021

To disclose

6 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for SIMMS FISHING PRODUCTS LLC →3 incidents on file

Simms Fishing Products, LLC notified the NH AG of a cyber-attack compromising payment card data (name, address, card number, CVV) for 1 NH resident. Malware stole data from purchases made Feb 26-Mar 1, 2021. Discovered March 2, 2021. Forensic specialists engaged; threat neutralized.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 6 weeks / 41 days

Feb 26, 2021

Begins

Mar 2, 2021

Discovered

Apr 12, 2021

Filed

vs. sector median

2 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_65b9e40f16c4b3762021-04-06 · +6dVerified
Maine State AGbd_cd3f5f50e17ae86e2021-04-06 · +6dCandidate
Montana State AGbd_ea510b871c7706a72021-04-06 · +6dVerified
Indiana State AGbd_f9f81345339fe16e2021-04-06 · +6dVerified

Name: SIMMS FISHING PRODUCTS LLC
norm: simms fishing products
Domain: simmsfishing.com
Industry: Retail/Consumer Goods

Name: SIMMS FISHING PRODUCTS LLC
norm: simms fishing products
Domain: simmsfishing.com
Industry: Retail/Consumer Goods
Industry: Retail & Consumerllm

Discovered: Mar 2, 2021
Breach occurred: Feb 26, 2021 – Mar 1, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2021
Affected individuals: 1state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Neutralized the threat to prevent any future harm
Began working with third-party computer forensic specialists
Implemented additional procedures to further protect the security of customer debit and credit card information
Notified the major payment card brands and its card processor
Notified state regulators
Changes made: Reviewed existing policies and procedures and implemented additional safeguards to further secure the information in its systems
Working to improve security protocols already in place to continue to protect against potential unauthorized activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGApr 6 · first

Maine State AGApr 6 · first

Montana State AGApr 6 · first

Indiana State AGApr 6 · first

New Hampshire State AG+6d · this page

Pattern: first filing Apr 6 (MA), last Apr 12 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/simms-fishing-products-20210412.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2021
Raw hash: 300e656f599f560a23c7b434b96caa4e2dd5ac93996a7ba79efd7cd548620132

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySIMMS FISHING PRODUCTS LLC

Victim entitySIMMS FISHING PRODUCTS LLC

Incidentdiscovered Mar 2, 2021

Stated responseNeutralized the threat to prevent any future harm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov