HackingOtherCustomer Data InvolvedPIIIdentity (basic)LowContained

GREAT BAY DISTRIBUTORS, INC.

bd_e279e0e28c2c69d0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 16, 2023

Filed

May 13, 2024

To disclose

21 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for GREAT BAY DISTRIBUTORS, INC. →

Great Bay Distributors, Inc. notified consumers of a data breach after detecting suspicious network activity on December 16, 2023. An unknown external actor gained access to certain parts of the network. The investigation determined that personal information, including names and other unspecified data elements, may have been accessed. The company engaged third-party cybersecurity specialists, deployed advanced threat protection tools, and reported the incident to law enforcement. Affected individuals are offered credit monitoring and identity theft protection services.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday21 weeks discovery → filing

Incident timeline

discovery → filing · 21 weeks / 149 days

Dec 16, 2023

Begins

Dec 16, 2023

Discovered

May 13, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_46556930b2afb4fa2024-05-13Verified
Maine State AGbd_9450f85524403ac32024-05-13Candidate
New Hampshire State AGbd_b1013c951800d37c2024-05-13Verified
Indiana State AGbd_cac14742c1e135272024-05-13Verified

Name: GREAT BAY DISTRIBUTORS, INC.
norm: great bay distributors

Name: GREAT BAY DISTRIBUTORS, INC.
norm: great bay distributors
Industry: Otherllm

Discovered: Dec 16, 2023
Breach occurred: Dec 16, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 13, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unknown
Threat actor: External
Regulator citations: Reported this incident to law enforcementReporting to regulatory authorities, as required

During the incident: Took steps to secure our network and minimize any disruption to our operations
Launched an investigation into the nature and scope of the incident with the assistance of third-party cybersecurity specialists
Deployed an advanced threat protection and monitoring tool
Reported this incident to law enforcement and are cooperating with their investigation
Notifying potentially impacted individuals
Reporting to regulatory authorities, as required
Offering immediate access to credit monitoring and identity theft protection services for ## months at no cost to you, through Experian IdentityWorks
Changes made: Reviewing existing security policies
Implemented additional cybersecurity measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGMay 13 · first

Maine State AGMay 13 · first

New Hampshire State AGMay 13 · first

Indiana State AGMay 13 · first

Vermont State AGMay 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-05-13-great-bay-distributors-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2024
Raw hash: fbf09a1af0d8389b01eb2b5cf0cce9e1a7d7563cc0e563c775c5e4bda9f31fe0

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityGREAT BAY DISTRIBUTORS, INC.

Victim entityGREAT BAY DISTRIBUTORS, INC.

Incidentdiscovered Dec 16, 2023

Stated responseTook steps to secure our network and minimize any disruption to our operations

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov