HackingStolen CredentialsCapture Stored DataData ExfiltratedPIIIDENTITY_BASICLowContained
SONNY'S ENTERPRISES, LLC
bd_3e7216da4b9546e8 · schema v1 · pii pii-v1
Full breach record for SONNY'S ENTERPRISES, LLC →Sonny's Enterprises LLC reported a cybersecurity incident occurring on or around June 19, 2023, where an unauthorized party accessed its on-premise network, removed data, and disrupted server operations. The company notified federal law enforcement, engaged forensic teams, and migrated systems to the cloud. Personal information was exposed, and the company offered two years of complimentary identity theft protection services to affected individuals.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f376cb59dee0198fNew Hampshire State AGfiled 2023-08-31(1d gap)Verified
- bd_9069fa5b7b91758cMaine State AGfiled 2023-08-29(3d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-01-sonnys-enterprises-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2023
- Raw hash
- 85b9d8f9fcc62e5b17a594c3634988f0de6577246f2e36ae0001ab21e5f2b995
Reporting entity
- Name
- SONNY'S ENTERPRISES, LLCnorm: sonny s
Victim entity
- Name
- SONNY'S ENTERPRISES, LLCnorm: sonny s
Incident
- Discovered
- Jun 19, 2023
- Materiality determined
- —
- Notification sent
- Sep 1, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement authorities
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.