MarineMax
Disclosed Mar 12, 20242 years ago123,494 affectedConfirmed
Cyberattack on boat retailer MarineMax disrupts operations
Boat retailer MarineMax determined on March 10, 2024 that a third party gained unauthorized access to portions of its information environment, and containment disrupted part of its business. It later disclosed that a cybercrime organization stole personal data, notifying over 123,000 people; the Rhysida gang claimed the attack.
What is known
| People affected | 123,494 (as reported by the organization) |
|---|---|
| Disclosed | Mar 12, 2024 |
| Discovered | Mar 10, 2024 |
| Happened | Mar 1, 2024 |
| Attack | Ransomware |
| Data exposed | Other |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: MarineMaxoag.ca.gov · Official notice | Official notice |
| Marinemax Inc Form 8-K, Item 1.05 (2024-03-12)sec.gov · SEC filing | SEC filing |
| Marinemax Inc Form 8-K/A, Item 1.05 (2024-04-01)sec.gov · SEC filing | SEC filing |
| California AG breach notice: MarineMax, Inc.oag.ca.gov · Regulator | Regulator |
| MarineMax data breach impacted over 123,000 individualssecurityaffairs.com · News | News |
| Vermont Attorney General: 2024-07-16 MarineMax Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: MarineMaxin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| SEC 8-Ktotal | Mar 12, 2024 | |
| Researchtotal | Mar 12, 2024 | 123,000 |
| SEC 8-Ktotal | Apr 1, 2024 | |
| California AGresidents of CA | Jul 16, 2024 | |
| Vermont AGresidents of VT | Jul 16, 2024 | |
| Indiana AGresidents of IN | Jul 16, 2024 | 328 |
History of this record
- 2026-09-25 · records: 123000 to 123494 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-07-16-marinemax-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to retail · seed source
- 2026-09-25 · attack: unknown to ransomware · seed source
- 2026-09-25 · data_types: [] to ["other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 123000 · seed source
- 2026-09-25 · discovered: empty to 2024-03-10 · seed source
- 2026-09-25 · summary: empty to Boat retailer MarineMax determined on March 10, 2024 that a third party gained unauthorized access to portions of its information environment, and containment disrupted part of its business. It later disclosed that a cybercrime organization · seed source
- 2026-09-25 · title: Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Cyberattack on boat retailer MarineMax disrupts operations · seed source
- 2026-09-25 · disclosed: 2024-07-16 to 2024-03-12 · backfill source
- 2026-09-25 · title: empty to Material cybersecurity incident reported to the SEC (8-K Item 1.05) · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.