MarineMax reports third-party access to its retail business environment

MarineMax, a recreational boat and yacht retailer, disclosed on March 12, 2024 that it had determined two days earlier that a third party gained unauthorized access to portions of its information environment. Its first filing said the affected environment did not hold sensitive data; its amendment revised that.

Original report

Containment disrupted part of the business, while operations continued in all material respects. The first filing ended with a statement about data.

April 1, 2024 amendment

The 8-K/A identified the intruder as a cybercrime organization and located the access in the retail side of the business. It reported that limited data had left the environment, including customer and employee personal information, and that notifications would follow.

Open points

MarineMax did not say how many customers or employees were affected, and neither filing reached a conclusion on financial materiality.