HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Instron
bd_1186e1aed21f3b4e · schema v1 · pii pii-v1
Full breach record for Instron →Instron notified Vermont consumers of a data security incident occurring August 10-18, 2023. An unauthorized third party accessed the internal IT network and obtained files containing personal information (names). Instron engaged forensic consultants, reset passwords, and enhanced network monitoring. Affected individuals were offered 24 months of credit and identity monitoring services through Kroll.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0be6426dcac08eb0Maine State AGfiled 2023-12-21Candidate
- bd_c2025e1e7b4f70b3Montana State AGfiled 2023-12-21Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-21-instron-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- a77c97f1ea2f8e1fbf6e1dabe3324a2d4df8d580a501b378aa399c95d317a823
Reporting entity
- Name
- Instronnorm: instron
Victim entity
- Name
- Instronnorm: instron
Incident
- Discovered
- Aug 18, 2023
- Materiality determined
- Dec 21, 2023
- Notification sent
- Dec 21, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.