HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Hammond Lumber Company
bd_3d468a3b183e3a9f · schema v1 · pii pii-v1
Full breach record for Hammond Lumber Company →Hammond Lumber Company notified consumers of a data breach occurring around March 21, 2023, involving unauthorized copying of files from its network. The breach affected customer names and other personal information. The company shut down its network, launched an investigation, reported the incident to federal law enforcement, and offered one to two years of complimentary identity monitoring services to affected individuals.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 48 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_2d92c98054a9f464Leak Sitelockbit_3filed 2023-03-29(48d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_0eb9d39c5c342129Maine State AGfiled 2023-05-16Verified
- bd_079111770019ae24Maine State AGfiled 2023-04-20(26d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-16-hammond-lumber-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2023
- Raw hash
- 518e3e8e60668655d816bf202df87a133b0754f87de20212a4184b98782b7aeb
Reporting entity
- Name
- Hammond Lumber Companynorm: hammond lumber
- Domain
- hammondlumber.com
Victim entity
- Name
- Hammond Lumber Companynorm: hammond lumber
- Domain
- hammondlumber.com
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- Apr 23, 2023
- Notification sent
- May 15, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Reported this event to federal law enforcement
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- VT AG >14 bdayLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.