HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTPIILowContained
BioLife Plasma Services L.P.
bd_4965c5051622a81e · schema v1 · pii pii-v1
Full breach record for BioLife Plasma Services L.P. →BioLife Plasma Services L.P. notified donors of a credential stuffing attack on its Donor Scheduling System beginning Jan 31, 2024, discovered Feb 6, 2024. Unauthorized access may have exposed names, addresses, birth dates, phone numbers, partial debit card digits, and loyalty points. No SSN was impacted. BioLife reset passwords and restored points. No specific count of affected individuals was disclosed in this Vermont filing.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_95a3d6fee40665abIndiana State AGfiled 2024-03-18Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-18-biolife-plasma-services-data-breach-notice-consumers-0
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2024
- Raw hash
- 2f6b7107ff8182597864b5b3957d1c32926eb7bebfdb9ccceab05fdaec731162
Reporting entity
- Name
- BioLife Plasma Services L.P.norm: biolife plasma
- Domain
- biolifeplasma.com
Victim entity
- Name
- BioLife Plasma Services L.P.norm: biolife plasma
- Domain
- biolifeplasma.com
Incident
- Discovered
- Feb 6, 2024
- Materiality determined
- —
- Notification sent
- Mar 18, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1110 Brute ForceT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.