HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
DanceBUG Inc.
bd_70058a402c00754d · schema v1 · pii pii-v1
Full breach record for DanceBUG Inc. →DanceBUG Inc. notified consumers of a data breach where an unauthorized person gained access to the company's website server. The attacker installed malware to capture customer data, including names, addresses, and payment card details, from April to August 2024. DanceBUG eradicated the malware, engaged forensic investigators, and offered 12 months of credit monitoring and fraud assistance to affected individuals.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fd81bae165c4eb47Maine State AGfiled 2024-11-20Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-11-20-dancebug-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2024
- Raw hash
- fa802631c20c55920a1bd5b4afc3c4f1f7106af9877f09609280dc7cbdd84a2d
Reporting entity
- Name
- DanceBUG Inc.norm: dancebug
Victim entity
- Name
- DanceBUG Inc.norm: dancebug
Incident
- Discovered
- Oct 10, 2024
- Materiality determined
- —
- Notification sent
- Nov 20, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.