HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Bunkhouse Group
bd_1e4b7f6611318a25 · schema v1 · pii pii-v1
Full breach record for Bunkhouse Group →Bunkhouse Management, LLC disclosed that in June 2024, an unauthorized individual accessed systems containing customer PII, including SSNs, driver's licenses, health insurance info, and payment card data. The company secured systems, investigated, and offered 12 months of credit monitoring. No identity theft was known at the time of notice.
Vermont clock✗ VT AG >45 bday45 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 318 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8b42b07d86b03dbeIndiana State AGfiled 2025-04-15Verified
- bd_a06296863afc683fNew Hampshire State AGfiled 2025-04-14(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-15-bunkhouse-management-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 15, 2025
- Raw hash
- 5d471de353f4da06febcdbed03ced18cff7b7b7d2ca81a7db8210be6ada81b8d
Reporting entity
- Name
- Bunkhouse Groupnorm: bunkhouse group
- Domain
- bunkhousehotels.com
Victim entity
- Name
- Bunkhouse Groupnorm: bunkhouse group
- Domain
- bunkhousehotels.com
Incident
- Discovered
- Jun 1, 2024
- Materiality determined
- —
- Notification sent
- Apr 15, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 45 weeks(318 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.