MalwareRansomwareData ExfiltratedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Tom James Company
bd_5f091cf4bf585881 · schema v1 · pii pii-v1
Full breach record for Tom James Company →Tom James Company notified consumers of a ransomware incident in August 2022. An unauthorized actor accessed files containing names and Social Security numbers. The company reported the incident to federal law enforcement, enhanced security policies, and provided 12 months of credit monitoring via Experian. Rhode Island residents were explicitly identified as impacted.
Vermont clock✗ VT AG >45 bday29 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_60497f4ff76efd97Maine State AGfiled 2023-02-17Candidate
- bd_dec2114b968e344dMontana State AGfiled 2023-02-17Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-17-tom-james-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 17, 2023
- Raw hash
- 1d5ccfc2c651798db2737389dc5d40d9871b4e8700a7309a4e5ac7cccf0bfe18
Reporting entity
- Name
- Tom James Companynorm: tom james
Victim entity
- Name
- Tom James Companynorm: tom james
Incident
- Discovered
- Aug 1, 2022
- Materiality determined
- —
- Notification sent
- Feb 17, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying relevant regulatory authorities, as required
Compliance
- Time to disclose
- 29 weeks(200 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.