HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Sears Hometown Stores, Inc.
bd_d730ef31d984b2e2 · schema v1 · pii pii-v1
Full breach record for Sears Hometown Stores, Inc. →Sears Hometown Stores, Inc. reported a data breach involving its third-party HR provider, Transform SR Holding Management LLC. Unauthorized access to employee data occurred between June 3 and June 15, 2021, and was discovered on June 24, 2021. The breach affected 9 New Hampshire residents, exposing Social Security numbers, financial account numbers, and healthcare insurance information. Sears Hometown notified the NH Attorney General on August 27, 2021, and sent notifications to affected individuals on August 24, 2021, offering 12 months of identity monitoring via Kroll.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e86f2bcad68028e8Montana State AGfiled 2021-08-24(3d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sears-hometown-stores-20210827.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 27, 2021
- Raw hash
- 77b69a36b5046a7cb53a19465d8f29d1c4a3894412a704f8ccea203c6172317c
Reporting entity
- Name
- Sears Hometown Stores, Inc.norm: sears hometown stores
Victim entity
- Name
- Sears Hometown Stores, Inc.norm: sears hometown stores
Incident
- Discovered
- Jun 24, 2021
- Materiality determined
- —
- Notification sent
- Aug 24, 2021
- Affected individuals
- 9
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified Consumer Protection Bureau, Office of the Attorney General, State of New Hampshire
- Third party
- via Transform SR Holding Management LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.