FEDERALItem 1.05 · mandatoryHackingRetail & ConsumerRetailAuto Parts RetailCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICEMPLOYMENTLowContained
MarineMax, Inc.
bd_f40953669866c89c · schema v1 · pii pii-v1
Full breach record for MarineMax, Inc. →MarineMax, Inc. (NYSE: HZO), a recreational boat and yacht retailer, disclosed on March 12, 2024 (amended April 1, 2024) that a cybercrime organization gained unauthorized access to portions of its information environment associated with its retail business. The threat actor exfiltrated limited customer and employee personally identifiable information. The company contained the incident, remediated the affected environment, notified law enforcement, and planned to notify affected parties and regulators.
SEC clockMateriality determined Mar 10, 2024 → Filed Apr 1, 202422d ✗ SEC 4-day late22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (2)
- bd_10eff69160530f44Leak Siterhysidafiled 2024-03-20(11d gap)Verified
- bd_845c5f713efed62aLeak Siterhysidafiled 2024-03-10(22d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_8a1ed142962d25ffSEC 8-Kfiled 2024-03-12(20d gap)Verified
- bd_a019d7e057c3ca54Maine State AGfiled 2024-07-16(106d gap)Verified
- bd_f6e3aae64c5b5698California State AGfiled 2024-07-16(106d gap)Verified by operator
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1057060/000095017024038881/hzo-20240310.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Apr 1, 2024
- Raw hash
- 0bea578f38f32b17ef5c60d9e945efd85e31e9786c902e819f4a764432266bc1
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- MarineMax, Inc.norm: marinemax
- SEC CIK
- 0001057060
- Domain
- marinemax.com
Victim entity
- Name
- MarineMax, Inc.norm: marinemax
- SEC CIK
- 0001057060
- Domain
- marinemax.com
- Industry
- Retail & ConsumerllmNAICS 441330 · Automotive Parts and Accessories Retailers
Incident
- Discovered
- Mar 10, 2024
- Materiality determined
- Mar 10, 2024
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
- Regulator citations
- Intends to provide appropriate notifications to regulatory agencies as required by federal and state law
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- SEC 4-day late · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Mar 10, 2024→ Filed: Apr 1, 202422d cal. 4 business days SEC 4-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.