HackingRetail & ConsumerRetailData ExfiltratedEmployee Data InvolvedPIIIdentity (basic)Government IDMediumContained

McArthur Glen Europe Inc.

bd_f5496d3a8c82e0a2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 26, 2024

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for McArthur Glen Europe Inc. →

McArthurGlen Europe Inc. experienced a cyberattack in late July 2024 resulting in unauthorized access and acquisition of sensitive information belonging to employees and investors. The company engaged external forensics experts and authorities to investigate and secure systems. Affected individuals are offered complimentary Experian IdentityWorks membership. No specific data types or counts were disclosed in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 1, 2024

Begins

Sep 26, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_795b2fa2758add032024-09-25 · +1dCandidate
Massachusetts State AGbd_cd9786efc9f967a12024-09-25 · +1dVerified

Name: McArthur Glen Europe Inc.
norm: mcarthur glen europe

Name: McArthur Glen Europe Inc.
norm: mcarthur glen europe
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jul 1, 2024 – Jul 31, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Working in close collaboration with external cyber forensics experts and the appropriate authorities to thoroughly investigate the incident and secure our systems
Taken several steps to further fortify our systems and detect suspicious activity on our networks
Offering a complimentary membership of Experian’s IdentityWorks
Changes made: Taken several steps to further fortify our systems and detect suspicious activity on our networks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGSep 25 · first

Massachusetts State AGSep 25 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mcarthurglen-europe-20240926.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2024
Raw hash: 6a009cd8e93bab2e29a957d638e5579c45c7ec12573826e9f09fcfdbc4223e36

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMcArthur Glen Europe Inc.

Victim entityMcArthur Glen Europe Inc.

IncidentUnauthorized Access

Stated responseWorking in close collaboration with external cyber forensics experts and the appropriate authorities to thoroughly investigate the incident and secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov