PhysicalRetail & ConsumerRetailTheftCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Saks, Inc.

bd_e378c7db7b5b6ca9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 15, 2008

Filed

May 16, 2008

To disclose

4 weeks

Affected

163state residents only

Confidence

68%

Full breach record for Saks, Inc. →

Saks, Inc. notified the NH Attorney General that four company laptops were stolen in mid-April 2008. Two laptops contained customer names, addresses, and credit card account numbers for 163 NH residents. No SSNs or PINs were stored. Saks investigated, notified law enforcement and the issuing bank, and sent cautionary notices to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 31 days

Apr 15, 2008

Discovered

May 16, 2008

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed163 affectedView incident

Name: Saks, Inc.
norm: saks

Name: Saks, Inc.
norm: saks
Industry: Retail & Consumerllm

Discovered: Apr 15, 2008
Materiality determined: —
Notification sent: —
Affected individuals: 163state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office

During the incident: Initiated its own investigation into the incident
Notified law enforcement
Notified the issuing bank of the affected credit card accounts
Drafted written notice of the breach to be sent to affected individuals
Changes made: Enhancing security measures to minimize the risk that this type of event occurs in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/saks-20080430.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 16, 2008
Raw hash: 0bbc484e4bfda99c63fb729185a55642ba3f9fe0a62fc7ea5956bc87db583809

Reporting entitySaks, Inc.

Victim entitySaks, Inc.

Incidentdiscovered Apr 15, 2008

Stated responseInitiated its own investigation into the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov