HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Cleveland Brothers
bd_09180b4e57c46c4c · schema v1 · pii pii-v1
Full breach record for Cleveland Brothers →Cleveland Brothers Holdings, Inc. notified consumers of a data breach where an unknown party accessed network data between Nov 3-5, 2022. The incident involved names and government IDs (SSNs, driver's licenses). The company engaged in investigation, password resets, and offered 24 months of credit monitoring.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 70 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_82e9395103416bc6Leak Siteblack_bastafiled 2022-12-09(70d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_0082f93b2943955aMaine State AGfiled 2023-02-17Verified by operator
- bd_becfc81a486ecfe2Montana State AGfiled 2023-02-17Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-17-cleveland-brothers-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 17, 2023
- Raw hash
- 1e5f664e3fca18b7cc566d0ece13193b3b1ad57e718b38717a8422c04b345888
Reporting entity
- Name
- Cleveland Brothersnorm: cleveland brothers
Victim entity
- Name
- Cleveland Brothersnorm: cleveland brothers
Incident
- Discovered
- Nov 5, 2022
- Materiality determined
- —
- Notification sent
- Feb 17, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(104 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.