MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Tuff Shed, Inc.
bd_e43cb39ba6c07695 · schema v1 · pii pii-v1
Full breach record for Tuff Shed, Inc. →Tuff Shed, Inc. reported a ransomware incident to the Maine Attorney General's office. The breach occurred on February 3, 2021, and was discovered on July 8, 2021. The incident affected a total of 4,112 individuals, including 16 Maine residents. The malware encrypted data and acquired financial account numbers in combination with personal identifiers. Tuff Shed provided written notification on August 3, 2021, and offered 24 months of credit monitoring through Kroll.
Maine clockDiscovered Jul 8, 2021 → Filed with AG Aug 3, 202126d ✓ ME AG ≤30d26 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4,112 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a8c729da-d324-41ac-9cca-00864fe49749.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2021
- Raw hash
- c895de3ed20a2d85747a99b4763b169b8f900ab7093c7b9cf3d75cf00c609e4f
Reporting entity
- Name
- Tuff Shed, Inc.norm: tuff shed
Victim entity
- Name
- Tuff Shed, Inc.norm: tuff shed
Incident
- Discovered
- Jul 8, 2021
- Materiality determined
- —
- Notification sent
- Aug 3, 2021
- Affected individuals
- 4,112
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 8, 2021→ Filed with AG: Aug 3, 202126d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.