HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
The Burton Corporation
bd_38faeac6c1a72dbe · schema v1 · pii pii-v1
Full breach record for The Burton Corporation →The Burton Corporation discovered suspicious activity on February 11, 2023. An investigation determined that an unknown actor potentially accessed or took files containing names, Social Security numbers, and financial account information. The company reset passwords, engaged forensics, and notified regulators and law enforcement. Affected individuals were offered identity monitoring services.
California clockDiscovered Feb 11, 2023 → Notified May 26, 2023104d ✗ CA 60-day late15 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_20899ac2272e63aeMontana State AGfiled 2023-05-26Verified
- bd_e4ed3d5bfff45550Maine State AGfiled 2023-05-26Verified
- bd_21e20f52d57403b8New Hampshire State AGfiled 2023-05-31(5d gap)Verified
- bd_3e5a6127a2ab7763New Hampshire State AGfiled 2023-04-03(53d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 60d gap
- bd_a3be66c627b7e9b2Maine State AGfiled 2023-03-28(59d gap)Verified
- bd_b411a07ae883b777Montana State AGfiled 2023-03-27(60d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-567297
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2023
- Raw hash
- 36253e65dad4b14eabb914ee4b81b4a38c38f697f04303a613809d04be6dfccc
Reporting entity
- Name
- The Burton Corporationnorm: the burton
Victim entity
- Name
- The Burton Corporationnorm: the burton
Incident
- Discovered
- Feb 11, 2023
- Materiality determined
- —
- Notification sent
- May 26, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified relevant state and federal regulators
Compliance
- Time to disclose
- 15 weeks(104 days from discovery to filing)
- Compliance flags
- CA 60-day late · 104d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 11, 2023→ Notified: May 26, 2023104d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.