HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

HAYDON CORPORATION

bd_0902948e56d59fe9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 27, 2022

Filed

Jan 26, 2023

To disclose

9 weeks

Affected

Not disclosed

Confidence

68%

Full breach record for HAYDON CORPORATION →

Haydon Corporation notified Vermont AG of a data breach discovered on November 27, 2022. Unauthorized access to company systems resulted in the exposure of names, SSNs, financial account numbers, and health plan enrollment data. The company engaged law enforcement, secured the network, and offered one year of Equifax credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 9 weeks / 60 days

Nov 27, 2022

Discovered

Jan 26, 2023

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: HAYDON CORPORATION
norm: haydon

Name: HAYDON CORPORATION
norm: haydon
Industry: Manufacturingllm

Discovered: Nov 27, 2022
Materiality determined: —
Notification sent: Jan 26, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported it to law enforcement
Initial access: valid_credentials

During the incident: Took measures to secure our network
Reported it to law enforcement
Began an investigation
Secured the services of Equifax to offer you a complimentary one-year membership to Equifax CompleteTM Premier which includes credit monitoring and fraud protection
Changes made: Implemented additional measures to enhance the security of our network
Continue to provide data security training to our employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(60 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-01-26-haydon-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2023
Raw hash: 379a409e981baee10410f66e62703010c22dfb1b903519dd44285b952180c71d

Reporting entityHAYDON CORPORATION

Victim entityHAYDON CORPORATION

Incidentdiscovered Nov 27, 2022

Stated responseTook measures to secure our network

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov