PhysicalRetail & ConsumerRetailTheftCustomer Data InvolvedIdentity (basic)Government IDMediumActive

CubeSmart Management, LLC

bd_dee8dd65fca53ddc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 27, 2012

Filed

Feb 3, 2012

To disclose

7 days

Affected

Not disclosed

Confidence

66%

Full breach record for CubeSmart Management, LLC →

CubeSmart Management, LLC (d/b/a Patriot Self Storage) reported missing files containing customer lease documents to the NH DOJ. Files likely contained names, addresses, driver's license numbers, and potentially SSNs. One NH resident notified. Investigation ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 days

Jan 27, 2012

Discovered

Feb 3, 2012

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: MORGAN, LEWIS & BOCKIUS LLP
norm: morgan lewis bockius
Industry: professional_services

Name: CubeSmart Management, LLC
norm: cubesmart management
Industry: retail_consumer
Industry: Retail & Consumerllm

Discovered: Jan 27, 2012
Materiality determined: —
Notification sent: Jan 27, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Department of Justice Consumer Protection Bureau

During the incident: Conducted a thorough search of its facility
Filed a police report
Sending notification letters out to all customers whose lease documents they believe were contained in the missing files
Changes made: Implementing new security procedures to prevent this type of situation from happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/patriot-self-storage-20120203.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2012
Raw hash: ed4b7ce3461e1eb1faafc1f506e8b319fa1ca9d390bd31ba1246cc0bde81d930

Reporting entityMORGAN, LEWIS & BOCKIUS LLP

Victim entityCubeSmart Management, LLC

Incidentdiscovered Jan 27, 2012

Stated responseConducted a thorough search of its facility

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov