DisclosureLens
MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedIdentity (basic)Government IDMediumContained

The Sporn Company dba Perrywinkle’s Fine Jewelry

bd_873c133210448fa3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 2, 2024

Filed

Apr 4, 2025

To disclose

18 weeks

Affected

Not disclosed

Confidence

66%

The Sporn Company dba Perrywinkle’s Fine Jewelry experienced a ransomware attack between November 23 and December 2, 2024. The incident resulted in the unauthorized access and acquisition of employee personal information, including names, Social Security numbers, and driver's license numbers. The company took systems offline, engaged forensic specialists, notified law enforcement, and is offering 24 months of complimentary credit monitoring to affected individuals.

Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 9 days
discovery → filing · 18 weeks / 123 days

Nov 23, 2024

Begins

Dec 2, 2024

Discovered

Apr 4, 2025

Filed

vs. sector median

+10 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.