HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTPIILowContained
Kiefer Aquatics
bd_4f0985924663bfab · schema v1 · pii pii-v1
Full breach record for Kiefer Aquatics →Kiefer Aquatics notified consumers of a data breach affecting credit/debit card information for purchases made between Feb 6 and Jun 28, 2022. The incident was discovered on Jul 21, 2022. The company engaged forensic specialists, contained the breach, and enhanced security procedures. No specific count of affected individuals was disclosed in the filing.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0544f2165bb6ad72Maine State AGfiled 2023-03-09Candidate
- bd_3765e3d478004fafCalifornia State AGfiled 2023-03-09Verified
- bd_4b1b03d7a4b29f56Montana State AGfiled 2023-03-09Verified by operator
- bd_56c0a8989af34ed8New Hampshire State AGfiled 2023-03-13(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-09-kiefer-aquatics-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 9, 2023
- Raw hash
- ac874f9bf39d453852a3589096da792950231ea87637e385298d8d9f976b5f35
Reporting entity
- Name
- Kiefer Aquaticsnorm: kiefer aquatics
- Domain
- kiefer.com
Victim entity
- Name
- Kiefer Aquaticsnorm: kiefer aquatics
- Domain
- kiefer.com
Incident
- Discovered
- Jul 21, 2022
- Materiality determined
- —
- Notification sent
- Mar 9, 2023
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 33 weeks(231 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.