HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Empire Parent, LLC; Empire Auto Parts, LLC
bd_8e2d32754c47f966 · schema v1 · pii pii-v1
Full breach record for Empire Parent, LLC; Empire Auto Parts, LLC →Empire Parent, LLC and Empire Auto Parts, LLC notified Rhode Island residents of a security incident on Jan 18, 2024, where an unauthorized individual accessed a limited amount of data via an email account. The incident involved basic identity information and government IDs. One Rhode Island resident was impacted. The company engaged outside cybersecurity professionals and offered credit monitoring.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-27-empire-parent-llc-empire-auto-parts-llc-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2024
- Raw hash
- 917ae537f1737be223502300fb45f33e74030abecd6cb7e21bc0370a580570f0
Reporting entity
- Name
- Empire Parent, LLC; Empire Auto Parts, LLCnorm: empire parent llc empire auto parts
Victim entity
- Name
- Empire Parent, LLC; Empire Auto Parts, LLCnorm: empire parent llc empire auto parts
Incident
- Discovered
- Jan 18, 2024
- Materiality determined
- Feb 27, 2024
- Notification sent
- Feb 27, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.