HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPIIMediumContained
SRAM, LLC
bd_04f267bec5622a8a · schema v1 · pii pii-v1
Full breach record for SRAM, LLC →SRAM, LLC notified consumers of a data breach involving unauthorized access to its network from March 6-15, 2025. The incident compromised personal information including names, SSNs, driver's licenses, financial account data, and medical/health insurance information. SRAM secured its network, notified federal law enforcement, and is offering 24 months of credit monitoring via Cyberscout. The investigation is ongoing.
Vermont clock⏱ VT AG >14 bday26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_94ac385ef654fa7eNew Hampshire State AGfiled 2025-04-10Verified
- bd_eb0787e6c0b0c234Indiana State AGfiled 2025-04-10Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-10-sram-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2025
- Raw hash
- 986fc8c6b5e7e79b85f77ab649a83a49cbbaca8db0b6cd7f4dd0322314b79493
Reporting entity
- Name
- SRAM, LLCnorm: sram
- Domain
- sram.com
Victim entity
- Name
- SRAM, LLCnorm: sram
- Domain
- sram.com
Incident
- Discovered
- Mar 15, 2025
- Materiality determined
- —
- Notification sent
- Apr 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotifying relevant regulators, as required
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.