HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTIDENTITY_BASICMediumResolved
BROWN-FORMAN CORPORATION
bd_2dc4eddf8b717fea · schema v1 · pii pii-v1
Full breach record for BROWN-FORMAN CORPORATION →Brown-Forman Corporation experienced a hacking incident discovered on July 28, 2020. Unauthorized actors stole data from the company's internal network, which was confirmed on August 4, 2020. The breach affected 72 Maine residents, including dependents, beneficiaries, and former employees, exposing their Social Security numbers and, in some cases, expired credit card information. The company provided notice to the affected individuals and offered one year of complimentary credit monitoring services.
Maine clockDiscovered Jul 28, 2020 → Filed with AG May 10, 2021286d ✗ ME AG >90d41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f7067c25a2400529California State AGfiled 2020-08-25(258d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/eaf2b678-f101-46d3-a45d-af2ee7981574.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 10, 2021
- Raw hash
- 9422570d466cbd322fc57f98e152f6212130ed6a5e565048768f8e57de45c164
Reporting entity
- Name
- BROWN-FORMAN CORPORATIONnorm: brown forman
- Domain
- brown-forman.com
Victim entity
- Name
- BROWN-FORMAN CORPORATIONnorm: brown forman
- Domain
- brown-forman.com
Incident
- Discovered
- Jul 28, 2020
- Materiality determined
- —
- Notification sent
- Apr 1, 2020
- Affected individuals
- 72
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 41 weeks(286 days from discovery to filing)
- Compliance flags
- ME AG >90d · 286d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 28, 2020→ Filed with AG: May 10, 2021286d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.