HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
BankCard USA Merchant Services, Inc
bd_8246dfd6459bcc1f · schema v1 · pii pii-v1
Full breach record for BankCard USA Merchant Services, Inc →BankCard USA Merchant Services Inc. notified consumers of a data breach where unauthorized access occurred between May 31 and June 1, 2023. The incident impacted names and potentially government IDs and financial account numbers. BankCard engaged forensic specialists, notified law enforcement, enhanced security, and offered 24 months of credit monitoring.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_020a7dc8bee3b655California State AGfiled 2023-08-16Verified
- bd_4f2c40775af300e8New Hampshire State AGfiled 2023-08-16Verified
- bd_5498a0e6f7f9db4eMontana State AGfiled 2023-08-16Candidate
- bd_b5cf7e9b23c6174eMaine State AGfiled 2023-08-16Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-16-bankcard-usa-merchant-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2023
- Raw hash
- 823881782b821fb0c8397b6b321f8dcabb1ce59a25a7dd8f39562dec0791e14b
Reporting entity
- Name
- BankCard USA Merchant Services, Incnorm: bankcard usa merchant
Victim entity
- Name
- BankCard USA Merchant Services, Incnorm: bankcard usa merchant
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- Aug 16, 2023
- Notification sent
- Aug 16, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Reported this incident to law enforcement
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.