HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICLowActive
The Burton Corporation
bd_21e20f52d57403b8 · schema v1 · pii pii-v1
Full breach record for The Burton Corporation →The Burton Corporation filed a supplemental notice with the New Hampshire Attorney General regarding a cyber-attack discovered on February 11, 2023. The incident affected 54 New Hampshire residents, including Burton employees and employees of The Chill Foundation. Personal information was potentially accessed. Burton engaged forensic specialists, reset passwords, notified law enforcement, and provided one year of credit monitoring. The investigation was ongoing as of May 26, 2023.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_20899ac2272e63aeMontana State AGfiled 2023-05-26(5d gap)Verified
- bd_38faeac6c1a72dbeCalifornia State AGfiled 2023-05-26(5d gap)Verified
- bd_e4ed3d5bfff45550Maine State AGfiled 2023-05-26(5d gap)Verified
- bd_3e5a6127a2ab7763New Hampshire State AGfiled 2023-04-03(58d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 65d gap
- bd_a3be66c627b7e9b2Maine State AGfiled 2023-03-28(64d gap)Verified
- bd_b411a07ae883b777Montana State AGfiled 2023-03-27(65d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/burton-corporation-20230531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 31, 2023
- Raw hash
- 293b7a4a07ba050715ee4aca2aa5833d7fb97c83ff9e0adf1406a805294a945f
Reporting entity
- Name
- The Burton Corporationnorm: the burton
Victim entity
- Name
- The Burton Corporationnorm: the burton
Incident
- Discovered
- Feb 11, 2023
- Materiality determined
- Apr 7, 2023
- Notification sent
- May 26, 2023
- Affected individuals
- 54
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney GeneralNotified federal law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(109 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.