HackingOtherCustomer Data InvolvedIdentity (basic)Government IDMediumContained

St. Moritz Marine Service, Inc.

bd_f4cff02fc12742a2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 29, 2026

Filed

Jul 14, 2026

To disclose

11 weeks

Affected

1state residents only

Confidence

66%

Full breach record for St. Moritz Marine Service, Inc. →

St. Moritz Marine Service, Inc. notified Massachusetts residents of a cybersecurity incident discovered on April 29, 2026, involving unauthorized access to its network. The breach potentially exposed personal information, including names. The company engaged third-party specialists, secured its systems, and offered 24 months of complimentary credit monitoring. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d11 weeks discovery → filing

Incident timeline

discovery → filing · 11 weeks / 76 days

Apr 29, 2026

Discovered

Jul 14, 2026

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: St. Moritz Marine Service, Inc.
norm: st moritz marine service

Name: St. Moritz Marine Service, Inc.
norm: st moritz marine service
Industry: Otherllm

Discovered: Apr 29, 2026
Materiality determined: —
Notification sent: Jul 13, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the incident
Took immediate action to address and investigate the event
Secured our systems and enhance the security of our network
Arranged for you to enroll, at no cost to you, in an online credit monitoring service for 24 months
Changes made: Enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1130-st-moritz-marine-service-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 14, 2026
Raw hash: fdad9d975d5fc032801f8b7627ed01555c571740f292a61db20d9563df4ef439

Reporting entitySt. Moritz Marine Service, Inc.

Victim entitySt. Moritz Marine Service, Inc.

Incidentdiscovered Apr 29, 2026

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the incident

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov