HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Bandolier
bd_357aa7c25f2200be · schema v1 · pii pii-v1
Full breach record for Bandolier →Karis & Drake, dba Bandolier, notified consumers of a data breach involving unauthorized access to personal information. Affected data included names, addresses, and government IDs. The company offered 90 days of credit monitoring and established a dedicated assistance line. The incident is contained.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-11-karis-drake-dba-bandolier-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2024
- Raw hash
- daafb057f78f62fa8e85cd934b1e6099ba4666deb798471354a89c72659ad6cf
Reporting entity
- Name
- Karis Care Servicesnorm: karis care
- Domain
- kariscares.com
Victim entity
- Name
- Bandoliernorm: bandolier
- Domain
- bandolierstyle.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Jul 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.