DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

City Furniture, Inc.

bd_fb13d7c6875c0b9e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 9, 2019

Filed

Oct 2, 2019

To disclose

12 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%
Full breach record for City Furniture, Inc.2 incidents on file

City Furniture, Inc. notified the New Hampshire Attorney General of a data security incident where an unauthorized user accessed cityfurniture.com between May 14 and July 9, 2019. The breach affected customer credit card data (including CVV) and PII. One NH resident was notified on October 2, 2019. City Furniture engaged forensic investigators and enhanced website security.

Incident timeline

undetected · 56 days
discovery → filing · 12 weeks / 85 days

May 14, 2019

Begins

Jul 9, 2019

Discovered

Oct 2, 2019

Filed

vs. sector median

+4 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 2 states

View merged incident ↗
New Hampshire State AGSep 11 · first
Massachusetts State AGSep 11 · first
New Hampshire State AG+21d · this page

Pattern: first filing Sep 11 (NH), last Oct 3 (MA) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.