HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Leisure Time Products, LLC
bd_f6a60054402dc472 · schema v1 · pii pii-v1
Full breach record for Leisure Time Products, LLC →Leisure Time Products, LLC d/b/a Backyard Discovery notified the Maryland AG of an unauthorized access to its computer systems occurring on or about November 9, 2024. The incident potentially affected approximately 3 Maryland residents. Data accessed included names, driver's license numbers, passports, medical information, bank account/routing numbers, and SSNs for a limited subset. Backyard Discovery contained the incident, engaged forensic experts, and is offering 12 months of credit monitoring.
Maryland clock✓ MD AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376564.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2025
- Raw hash
- 83915b3673c8dbeb73408232b254b70f1eacba5c225d422ee51449481404baf2
Reporting entity
- Name
- Leisure Time Products, LLCnorm: leisure time products
Victim entity
- Name
- Leisure Time Products, LLCnorm: leisure time products
Incident
- Discovered
- Feb 19, 2025
- Materiality determined
- —
- Notification sent
- Mar 17, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- MD AG ≤30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.