HackingIdentity (basic)Government IDFinancial accountMediumContained

BASSETT FURNITURE INDUSTRIES INC

bd_f5626a67e85caeeb · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 22, 2023

To disclose

—

Affected

38state residents only

Linked

7 filings

Confidence

66%

Full breach record for BASSETT FURNITURE INDUSTRIES INC →2 incidents on file

Bassett Furniture Industries notified 38 New Hampshire residents of a data breach involving unauthorized access to its e-commerce website between July 2021 and April 2023. An attacker injected code to capture customer data. The company engaged third-party cybersecurity specialists, migrated its e-commerce platform, and provided credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 29, 2021

Begins

Sep 22, 2023

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_02fbfffce87a6eeb2023-09-22Verified
Massachusetts State AGbd_24653a70a0d0d4e72023-09-22Verified
Montana State AGbd_67e96fb6743a47842023-09-22Verified
Indiana State AGbd_84c1587c69f976282023-09-22Verified

Show 2 more filings ↓

Vermont State AGbd_c0f90f75baae0abe2023-09-22Verified
Maine State AGbd_e2a4d8b329957e702023-09-22Candidate

Name: BASSETT FURNITURE INDUSTRIES INC
norm: bassett furniture
Domain: bassettfurniture.com

Name: BASSETT FURNITURE INDUSTRIES INC
norm: bassett furniture
Domain: bassettfurniture.com

Discovered: —
Breach occurred: Jul 29, 2021 – Apr 27, 2023
Materiality determined: —
Notification sent: Sep 22, 2023
Affected individuals: 38state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input Capture
Threat actor: External
Regulator citations: providing written notice of this incident to relevant state regulators
Initial access: exploit_public_facing

During the incident: Launched an investigation, with the assistance of third-party cybersecurity specialists
Assess the security of Bassett Furniture’s systems and e-commerce website
Implemented additional technical safeguards
Migrated its e-commerce site to a new platform
Provides training to its employees
Providing access to credit monitoring and identity restoration services
Providing written notice of this incident to relevant state regulators
Providing written notice... to the three major credit reporting agencies
Changes made: Implemented additional technical safeguards
Migrated its e-commerce site to a new platform to further enhance its security posture
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGSep 22 · first

Massachusetts State AGSep 22 · first

Montana State AGSep 22 · first

Indiana State AGSep 22 · first

Vermont State AGSep 22 · first

Maine State AGSep 22 · first

New Hampshire State AGSep 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bassett-furniture-industries-20230922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2023
Raw hash: c687828c6701251b460fb6e1de92b69e5df290f1b1e6dba0e75f7845aa1766f8

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBASSETT FURNITURE INDUSTRIES INC

Victim entityBASSETT FURNITURE INDUSTRIES INC

IncidentUnauthorized Access

Stated responseLaunched an investigation, with the assistance of third-party cybersecurity specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov