HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Oregon Zoo
bd_030340fa9bf49d29 · schema v1 · pii pii-v1
Full breach record for Oregon Zoo →Oregon Zoo notified consumers of a security incident involving its online ticketing service. An unauthorized actor redirected transactions via a third-party vendor, potentially obtaining payment card data (name, number, CVV, expiration) from Dec 20, 2023 to June 26, 2024. The Zoo decommissioned the site, rebuilt it securely, notified law enforcement, and offered 12 months of credit monitoring. Approximately 129 Rhode Island residents were explicitly identified as impacted.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_35707d21e6359ec8New Hampshire State AGfiled 2024-08-16(1d gap)Verified
- bd_7933cf448981fd2eIndiana State AGfiled 2024-08-16(1d gap)Verified
- bd_8f16876c653d58c0California State AGfiled 2024-08-16(1d gap)Verified
- bd_98ba3ed1bf370bc4Maine State AGfiled 2024-08-16(1d gap)Candidate
Show 3 more filings ↓Show fewer ↑up to 1d gap
- bd_9ce4d77c9ac25ea2Oregon State AGfiled 2024-08-16(1d gap)Verified
- bd_9fa00df1a160f3cfMontana State AGfiled 2024-08-16(1d gap)Verified
- bd_b908bf9c55af795bWashington State AGfiled 2024-08-16(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-15-oregon-zoo-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 15, 2024
- Raw hash
- 8958efa958be0a1588c21a029878ae93dc513b21126b0468d5375a0913907c01
Reporting entity
- Name
- Oregon Zoonorm: oregon zoo
Victim entity
- Name
- Oregon Zoonorm: oregon zoo
Incident
- Discovered
- Jun 26, 2024
- Materiality determined
- —
- Notification sent
- Aug 16, 2024
- Affected individuals
- 129
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.