Tuff Shed, Inc.
ent_493678c0a9d0c7baab2f4322
Disclosures
6
State AG · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
4,412
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Tuff Shed, Inc.
- Normalized
- tuff shed— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- New Hampshire State AGas victim2021-08-04
Tuff Shed, Inc. notified the NH AG of unauthorized access to an account from Feb 3-10, 2021, discovered Feb 10, 2021. 64 NH residents affected. Data included names, SSNs, driver's licenses, financial accounts, and medical info. Response included forensic investigation, credit monitoring via Kroll, and employee training.
- Massachusetts State AGas victim2021-08-03
Tuff Shed, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-08-03. 14 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2021-08-03
Tuff Shed, Inc. reported unauthorized access to certain computer systems between February 3, 2021, and February 10, 2021. The company launched an investigation with third-party forensic specialists. On July 14, 2021, the review determined that affected systems contained personal information related to customers. Tuff Shed is providing 12 months of identity monitoring services through Kroll. The specific nature of the attack vector and the exact data types (beyond general PII) are not detailed in the notice, though the template implies standard personal identifiers.
- Montana State AGas victim2021-08-03
Tuff Shed, Inc. notified affected individuals in Montana and other states of unauthorized access to computer systems between Feb 3-10, 2021. The company engaged forensic specialists and determined PII was present. No unauthorized disclosure was confirmed. 12 months of Kroll identity monitoring was offered.
- Maine State AGas victim2021-08-03
Tuff Shed, Inc. reported a ransomware incident to the Maine Attorney General's office. The breach occurred on February 3, 2021, and was discovered on July 8, 2021. The incident affected a total of 4,112 individuals, including 16 Maine residents. The malware encrypted data and acquired financial account numbers in combination with personal identifiers. Tuff Shed provided written notification on August 3, 2021, and offered 24 months of credit monitoring through Kroll.
- Indiana State AGas victim2021-08-03
Tuff Shed, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-03 and was reported on 2021-08-03. 21 Indiana residents were affected. 4,412 individuals affected in total.