MarineMax reported that it was the victim of a cyberattack March 10. The company initiated an incident response and took immediate measures to minimize damage.
In a Form 8-K filed with the U.S. Securities and Exchange Commission, MarineMax said it experienced a “cybersecurity incident,” as defined by SEC rules, during which a “third party gained unauthorized access to portions of its information environment.” The company said it “initiated its previously determined incident response and business continuity protocols,” and took measures to contain the attack.
MarineMax said the containment measures resulted in some disruption to its business but that operations continued. The company is investigating the extent of the incident, has engaged cybersecurity experts and notified law enforcement. It added that the incident has not had a material impact on operations and is determining if the attack is likely to impact financial conditions. The company said it does not maintain sensitive data in the information environment impacted by the incident.
