MarineMax

Disclosed Mar 12, 2024123,494 affectedConfirmed

Cyberattack on boat retailer MarineMax disrupts operations

Boat retailer MarineMax determined on March 10, 2024 that a third party gained unauthorized access to portions of its information environment, and containment disrupted part of its business. It later disclosed that a cybercrime organization stole personal data, notifying over 123,000 people; the Rhysida gang claimed the attack.

What is known

People affected	123,494 (as reported by the organization)
Disclosed	Mar 12, 2024
Discovered	Mar 10, 2024
Happened	Mar 1, 2024
Attack	Ransomware
Data exposed	Other
Sector	Retail · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: MarineMax

SEC filingsec.gov

Marinemax Inc Form 8-K, Item 1.05 (2024-03-12)

SEC filingsec.gov

Marinemax Inc Form 8-K/A, Item 1.05 (2024-04-01)

Regulatoroag.ca.gov

California AG breach notice: MarineMax, Inc.

Newssecurityaffairs.com

MarineMax data breach impacted over 123,000 individuals

Official noticeago.vermont.gov

Vermont Attorney General: 2024-07-16 MarineMax Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2024 data breach report: MarineMax

Notices filed

TotalMar 12, 2024

SEC 8-KCount not stated

TotalMar 12, 2024

Research123,000 people

TotalApr 1, 2024

SEC 8-KCount not stated

Residents of CAJul 16, 2024

California AGCount not stated

Residents of VTJul 16, 2024

Vermont AGCount not stated

Residents of INJul 16, 2024

Indiana AG328 people

History of this record

records2026-09-25

123000 to 123494by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2024-07-16-marinemax-data-breach-notice-consumersby backfillSource

sector2026-09-25

other to retailby seedSource

attack2026-09-25

unknown to ransomwareby seedSource

data_types2026-09-25

[] to ["other"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 123000by seedSource

discovered2026-09-25

empty to 2024-03-10by seedSource

summary2026-09-25

empty to Boat retailer MarineMax determined on March 10, 2024 that a third party gained unauthorized access to portions of its information environment, and containment disrupted part of its business. It later disclosed that a cybercrime organizationby seedSource

title2026-09-25

Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Cyberattack on boat retailer MarineMax disrupts operationsby seedSource

disclosed2026-09-25

2024-07-16 to 2024-03-12by backfillSource

title2026-09-25

empty to Material cybersecurity incident reported to the SEC (8-K Item 1.05)by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about MarineMax