HackingDelayed DiscoveryIDENTITY_BASICLowContained
Barnhart
bd_5078f0b0e0f480fb · schema v1 · pii pii-v1
Full breach record for Barnhart →Barnhart Group, Inc. notified consumers of unauthorized access to network data between August 27-29, 2025. The incident involved names combined with other identifiers. The company engaged law enforcement and forensic specialists, secured systems, and offered 12 months of credit monitoring and fraud assistance. Notification was sent in February 2026.
Vermont clock✗ VT AG >45 bday23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by chaos about this victim predates this filing by 350 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_53cf638f78a7ea90Leak Sitechaosfiled 2025-02-19(350d gap)Candidate
Regulatory filings (1) · sorted by filing gap
- bd_52ec77667c6a28cfIndiana State AGfiled 2026-02-04Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-04-barnhart-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2026
- Raw hash
- 37eb14d9b2cee203c7623682fc1efd9e0d99d677b5c4a641bb38ef031467bd15
Reporting entity
- Name
- Barnhartnorm: barnhart
- Domain
- barnhartcrane.com
Victim entity
- Name
- Barnhartnorm: barnhart
- Domain
- barnhartcrane.com
Incident
- Discovered
- Aug 29, 2025
- Materiality determined
- —
- Notification sent
- Feb 4, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- contacted law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 weeks(159 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.