MalwareRetail & ConsumerRetailRansomwareData ExfiltratedCustomer Data InvolvedRansom DemandedGovernment IDIdentity (basic)Financial accountMediumContained

GUESS?, LLC

bd_e514d0f72546771c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 19, 2021

Filed

Jul 9, 2021

To disclose

20 weeks

Affected

2state residents only

Linked

6 filings

Confidence

65%

Full breach record for GUESS?, LLC →

Guess?, Inc. notified the New Hampshire Attorney General of a ransomware incident affecting systems between Feb 2-23, 2021. Unauthorized access led to file encryption and disruption. Personal information including SSNs, driver's licenses, passport numbers, and financial account numbers were accessed. Notification letters were mailed on July 9, 2021, to 2 NH residents. Remediation included forensic engagement, law enforcement cooperation, and credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 17 days

discovery → filing · 20 weeks / 140 days

Feb 2, 2021

Begins

Feb 19, 2021

Discovered

Jul 9, 2021

Filed

vs. sector median

+12 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by darkside about this victim predates this filing by 158 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedarksidebd_51f22e2136e6dd462021-02-01 · +158dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_bc1b7eef14b508172021-07-09Verified by operator
Maine State AGbd_c316604e1deedfda2021-07-09Verified
California State AGbd_d16da922327a3ecd2021-07-09Verified
Massachusetts State AGbd_f799a3576eecd77c2021-07-09Verified by operator

Name: GUESS?, LLC
norm: guess

Name: GUESS?, LLC
norm: guess
Industry: Retail & Consumerllm

Discovered: Feb 19, 2021
Breach occurred: Feb 2, 2021 – Feb 23, 2021
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 9, 2021
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Gordon MacDonald
Initial access: valid_credentials

During the incident: Activated its incident response plan
A cybersecurity forensics firm was engaged to assist with the investigation and containment
Notified law enforcement and is cooperating with their investigation
Established a dedicated call center for individuals to call with questions about the incident or enrolling in credit monitoring services
Offering a complimentary one-year membership in credit monitoring and identity theft protection services through Experian
Changes made: Implemented additional measures to further enhance the security of its network and existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJul 9 · first

Maine State AGJul 9 · first

California State AGJul 9 · first

Massachusetts State AGJul 9 · first

New Hampshire State AGJul 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/guess-20210709.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 9, 2021
Raw hash: f3ce4c4324cc51d2499a89407b0ece9e034df8639287769251c003d632a49c63

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityGUESS?, LLC

Victim entityGUESS?, LLC

Incidentdiscovered Feb 19, 2021

Stated responseActivated its incident response plan

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov