HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Timex Group USA, Inc.
bd_2d27084a998c553d · schema v1 · pii pii-v1
Full breach record for Timex Group USA, Inc. →Timex Group USA, Inc. notified consumers of a cyber-attack where unauthorized access occurred between June 1-5, 2023. The incident compromised names and Social Security numbers. Timex engaged forensic specialists, implemented safeguards, and offers 24 months of credit monitoring. The discovery was delayed until December 2023.
Vermont clock✗ VT AG >45 bday34 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5fd1dcb0fb8d0274New Hampshire State AGfiled 2024-01-29Verified
- bd_a15f9f51735d9c33Maine State AGfiled 2024-01-29Candidate
- bd_b86210de00ff4ae7Montana State AGfiled 2024-01-29Verified by operator
- bd_e6e3f203a2f904e4Indiana State AGfiled 2024-01-29Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-01-29-timex-group-usa-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 29, 2024
- Raw hash
- 4113d9a622b3a5e9729858e8887ff6b54d0b305b15d0e612654372675f56dac3
Reporting entity
- Name
- Timex Group USA, Inc.norm: timex group usa
Victim entity
- Name
- Timex Group USA, Inc.norm: timex group usa
Incident
- Discovered
- Jun 5, 2023
- Materiality determined
- Dec 14, 2023
- Notification sent
- Jan 29, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- This notice has not been delayed by law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.