HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Dansons U.S., LLC

bd_d42196374c1c8383 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 7, 2021

Filed

Dec 14, 2021

To disclose

23 weeks

Affected

19state residents only

Linked

3 filings

Confidence

66%

Full breach record for Dansons U.S., LLC →

Dansons U.S., LLC notified the New Hampshire Attorney General of a data security incident affecting 19 state residents. Unauthorized parties accessed customer payment and personal information (names, addresses) via the pitboss-grills.com website between May 7 and July 9, 2021. The company discovered the breach on July 7, 2021, engaged forensic experts, and began notifying residents on December 14, 2021. Remediation included migrating servers and updating payment systems.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 61 days

discovery → filing · 23 weeks / 160 days

May 7, 2021

Begins

Jul 7, 2021

Discovered

Dec 14, 2021

Filed

vs. sector median

+15 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_0704a7c6c468ce422021-12-14Candidate
Indiana State AGbd_833d1fc78ad0c38a2021-12-14Verified

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: Dansons U.S., LLC
norm: dansons us
Industry: Retail & Consumerllm

Discovered: Jul 7, 2021
Breach occurred: May 7, 2021 – Jul 9, 2021
Undetected for: 61 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 14, 2021
Affected individuals: 19state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Implemented a file integrity monitoring solution
Engaged a leading computer forensic firm and cybersecurity experts
Conducted an investigation
Changes made: Migrated the pitboss-grills.com website to separate webservers
Updated its webserver software
Migrated the online payment system to a new solution
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(160 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGDec 14 · first

Indiana State AGDec 14 · first

New Hampshire State AGDec 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dansons-20211214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 14, 2021
Raw hash: 66bdce5c8a67f762e2f35a0a79dd5b08ea0d0452f792794978cbbaac13c24316

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityDansons U.S., LLC

Incidentdiscovered Jul 7, 2021

Stated responseImplemented a file integrity monitoring solution

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov