MalwareRansomwarePlayData ExfiltratedData EncryptedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumActive
Oldenburg Group Incorporated
bd_6312e01945e8bffb · schema v1 · pii pii-v1
Full breach record for Oldenburg Group Incorporated →Oldenburg Group Incorporated reported a ransomware incident between May 4-5, 2024, attributed to the Play ransomware group. Attackers installed ransomware on primary servers and may have accessed personal information. Data potentially exposed includes names, SSNs, driver's license numbers, financial account info, tax info, and medical/health insurance information. The company engaged forensic investigators and IT services, enhanced security protocols, and offered 12 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_14918c6df2efebf0Indiana State AGfiled 2024-05-30(33d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-02-oldenburg-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2024
- Raw hash
- 0e6bd5dd4381e98c33e823ed0c39437c2c936637eda9822abec987dc1903035a
Reporting entity
- Name
- Oldenburg Group Incorporatednorm: oldenburg group
Victim entity
- Name
- Oldenburg Group Incorporatednorm: oldenburg group
Incident
- Discovered
- May 4, 2024
- Materiality determined
- —
- Notification sent
- Jul 2, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Ransomware· Play
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- PlayExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.