HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Mastercorp
bd_987c1d95566b0a3c · schema v1 · pii pii-v1
Full breach record for Mastercorp →MasterCorp, Inc. notified consumers of a data breach detected on March 31, 2023. An unauthorized party accessed the network between March 30-31, 2023, potentially removing files containing names and Social Security numbers. MasterCorp contained the threat, engaged external cybersecurity professionals, and is offering complimentary credit monitoring services to affected individuals.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 32 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_f7a0a5ed0c870133Leak Siteblack_bastafiled 2023-04-27(32d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-30-mastercorp-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 30, 2023
- Raw hash
- a2d54875987872594d4a1457b442cd29a456e9c0c521a3961d8795ad561e69c0
Reporting entity
- Name
- Mastercorpnorm: mastercorp
- Domain
- mastercorp.com
Victim entity
- Name
- Mastercorpnorm: mastercorp
- Domain
- mastercorp.com
Incident
- Discovered
- Mar 31, 2023
- Materiality determined
- May 30, 2023
- Notification sent
- May 30, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- VT AG >14 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.