DisclosureLens
UnknownRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMedium

MarineMax, Inc.

bd_f6e3aae64c5b5698 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 16, 2024

To disclose

—

Affected

Not disclosed

Linked

12 records

Confidence

66%
Full breach record for MarineMax, Inc. →

MarineMax, Inc. reported a data security breach to the California Attorney General. The incident occurred between March 1, 2024, and March 10, 2024. The notification letter indicates that affected individuals' information may include names, addresses, and Social Security numbers. MarineMax is offering 24 months of complimentary identity monitoring services through Experian IdentityWorks to affected individuals. The specific cause of the breach and the number of affected individuals are not detailed in the provided documents.

Leak gap clock⏱ Leak >90d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Mar 1, 2024

Begins

Jul 16, 2024

Filed

This filing is one of 12 records about the same incident.View merged incident
A leak claim by rhysida about this victim was first seen 118 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 126d gap

Press reports (1)

Showing first 10 of 11 linked disclosures.

Filing propagation · 10 filings · 8 states

View merged incident ↗
SEC 8-KMar 12 · first
SEC 8-K+20d
Indiana State AG+126d
Massachusetts State AG+126d
South Carolina State AG+126d
New Hampshire State AG+126d
Vermont State AG+126d
Maine State AG+126d
Montana State AG+126d
California State AG+126d · this page

Pattern: first filing Mar 12, last Jul 16 (CA) — a 126-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.