HackingData ExfiltratedIDENTITY_BASICPIILowContained
Matco Tools
bd_6ccb99b922f8bbe6 · schema v1 · pii pii-v1
Full breach record for Matco Tools →Matco Tools notified Vermont consumers of a data breach where an unauthorized party accessed the network starting March 1, 2022. The incident involved suspicious activity copying data outside the network. Affected data included names and variable personal data. Matco disconnected systems, disabled accounts, and offered one year of identity monitoring.
Vermont clock✗ VT AG >45 bday47 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_03354f9b5843f191Montana State AGfiled 2023-01-26Candidate
- bd_48e01401955fb6a1California State AGfiled 2023-01-26Verified by operator
- bd_5edad1d53878400dNew Hampshire State AGfiled 2023-01-26Verified
- bd_a0fc783c46490838Maine State AGfiled 2023-01-26Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-01-26-matco-tools-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2023
- Raw hash
- 048083c0f839b98003b25148b8f1c3ad5ea4192984beafdf3f6e46868ad6167c
Reporting entity
- Name
- Matco Toolsnorm: matco tools
Victim entity
- Name
- Matco Toolsnorm: matco tools
Incident
- Discovered
- Mar 1, 2022
- Materiality determined
- Dec 8, 2022
- Notification sent
- Jan 26, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 47 weeks(331 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.