HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICAUTHENTICATIONMediumContained
Barrett Firearms
bd_43c278520e678e94 · schema v1 · pii pii-v1
Full breach record for Barrett Firearms →Barrett-Jackson Holdings, LLC notified consumers of a cyber incident occurring on November 25, 2024, where files containing names, SSNs, driver's licenses, passport numbers, bank account details, and health information were copied. The company secured its systems and offers 12 months of credit monitoring. No identity theft has been confirmed.
Vermont clock✗ VT AG >45 bday35 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_09522c67b5b300fbOregon State AGfiled 2025-07-31Candidate
- bd_4b01d59387a7543eWashington State AGfiled 2025-07-31Verified
- bd_b36a16c82c0a9a07California State AGfiled 2025-07-31Verified
- bd_ba0d8f3fdfcc44ecMontana State AGfiled 2025-07-31Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_fd86701621597607New Hampshire State AGfiled 2025-07-31Verified
- bd_827aa3a0c7e5f7ebTexas State AGfiled 2025-08-01(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-31-barrett-jackson-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 31, 2025
- Raw hash
- 3de170ed604b9b2acc1b0586a25f953e7b251c588d5465a9e224e18c39fed327
Reporting entity
- Name
- Barrett Firearmsnorm: barrett firearms
- Domain
- barrett.net
Victim entity
- Name
- Barrett Firearmsnorm: barrett firearms
- Domain
- barrett.net
Incident
- Discovered
- Nov 25, 2024
- Materiality determined
- —
- Notification sent
- Jul 31, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICAUTHENTICATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(248 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.