HackingEducationEducationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Missouri Botanical Garden

bd_91a045e715c9b7b9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 19, 2024

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Missouri Botanical Garden →

The Missouri Botanical Garden notified consumers that an unauthorized third party gained access to its network on or around March 7, 2024, and acquired certain files. The investigation concluded on August 26, 2024. Affected data may include names, driver's license numbers, passport numbers, medical information, health insurance information, and Social Security numbers. The organization engaged forensic specialists, secured systems, reported to law enforcement, and is providing credit monitoring and fraud assistance services.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 7, 2024

Begins

Sep 19, 2024

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_52038c563d1690122024-09-19Verified
Montana State AGbd_90beed8d5a6545c92024-09-23 · +4dCandidate
New Hampshire State AGbd_b3e7d5b1ea07b21c2024-09-23 · +4dVerified

Name: Missouri Botanical Garden
norm: missouri botanical garden

Name: Missouri Botanical Garden
norm: missouri botanical garden
Industry: Educationllm

Discovered: —
Breach occurred: Mar 7, 2024
Materiality determined: —
Notification sent: Sep 19, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Reported this to law enforcement

During the incident: Engaged third-party specialists to assist us with securing the network and investigating the incident
Took steps to secure our systems
Reported this to law enforcement
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Identify and implement measures to further enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 19 · first

Vermont State AGSep 19 · first · this page

Montana State AG+4d

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-09-19-missouri-botanical-garden-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: d0cf08f2ffda5629dd20673b9fadef4cc9be1fd7fff1a9dbaa940387557996fa

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMissouri Botanical Garden

Victim entityMissouri Botanical Garden

IncidentUnknown

Stated responseEngaged third-party specialists to assist us with securing the network and investigating the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov