HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
TY Inc
bd_3c7fdcb7cd4b1185 · schema v1 · pii pii-v1
Full breach record for TY Inc →Ty Inc notified consumers in Vermont and other states of a cybersecurity incident identified on April 26, 2023, where an unauthorized party accessed files on its corporate network. The breach involved personal information. Ty Inc secured the network, engaged in an investigation, implemented additional safeguards, and offered one year of complimentary identity monitoring through Kroll.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by bianlian about this victim predates this filing by 106 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-15-ty-inc-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2023
- Raw hash
- e52f8dc16913557df478db7b65dce71af6fc2a675a2059383b72b81770fe812e
Reporting entity
- Name
- TY Incnorm: ty
- Domain
- ty.com
Victim entity
- Name
- TY Incnorm: ty
- Domain
- ty.com
Incident
- Discovered
- Apr 26, 2023
- Materiality determined
- —
- Notification sent
- Sep 15, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(142 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.