MalwareRansomwareRansom DemandedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Santoro Fabworx
bd_981104376d93d7ff · schema v1 · pii pii-v1
Full breach record for Santoro Fabworx →Santoro Whitmire, a professional services firm that permanently closed, notified consumers of a ransomware attack discovered on May 8, 2024. The attack encrypted systems and likely resulted in the access of personal information including names and government IDs. The firm engaged forensic experts, notified law enforcement, and offered credit monitoring and identity theft recovery services to affected individuals across multiple states.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_19718cf69cd36a64California State AGfiled 2024-06-11Verified
- bd_3011f18d199b1d42Montana State AGfiled 2024-06-11Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-11-santoro-whitmire-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2024
- Raw hash
- a201671fa46cd14c5ac5d4e2b943701fa267b036cbc3f9b863f9387454631073
Reporting entity
- Name
- Santoro Fabworxnorm: santoro fabworx
- Domain
- santorofabworx.com
Victim entity
- Name
- Santoro Fabworxnorm: santoro fabworx
- Domain
- santorofabworx.com
Incident
- Discovered
- May 8, 2024
- Materiality determined
- —
- Notification sent
- Jun 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.