HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedPIIIDENTITY_BASICLowContained
Growth Builders LLC
bd_115a1eafbc2ad0f9 · schema v1 · pii pii-v1
Full breach record for Growth Builders LLC →Growth Builders LLC notified consumers of a data breach involving its third-party IT provider, HRTec. Suspicious activity was identified on December 5, 2023. An unauthorized actor accessed network information. Data involved names and unspecified data elements. Growth engaged forensic specialists, secured its environment, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday32 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0d8b496bc6cb4abeIndiana State AGfiled 2024-07-15(3d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-18-growth-builders-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2024
- Raw hash
- 1a325d0e952afc22d82dd583476519f4897f9fd4f8a5b603860b49b605731638
Reporting entity
- Name
- Growth Builders LLCnorm: growth builders
Victim entity
- Name
- Growth Builders LLCnorm: growth builders
Incident
- Discovered
- Dec 5, 2023
- Materiality determined
- —
- Notification sent
- Jul 18, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Third party
- via Human Resources Technologies, Inc. (HRTec)
- Initial access
- supply_chain
Compliance
- Time to disclose
- 32 weeks(226 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.