MalwareRansomwareData EncryptedDelayed DiscoveryIDENTITY_BASICLowContained
American Trading and Production Corporation
bd_9e3ee27bb58aba0a · schema v1 · pii pii-v1
Full breach record for American Trading and Production Corporation →American Trading and Production Corporation (ATAPCO) notified consumers of a data breach where an unauthorized actor accessed systems between Feb 17 and May 5, 2022. The incident involved malware infection preventing file access. Impacted data included names and potentially other PII. ATAPCO engaged forensic specialists, reported to law enforcement, and offered 24 months of credit monitoring. The incident was discovered in May 2022.
Vermont clock✗ VT AG >45 bday19 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_169dcde121c93edaMaine State AGfiled 2023-11-10Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-10-american-trading-and-production-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2023
- Raw hash
- a722d0a582564ae28d51eb7accf804547c93f6c4078af9628a240227c80e2612
Reporting entity
- Name
- American Trading and Production Corporationnorm: american trading and production
Victim entity
- Name
- American Trading and Production Corporationnorm: american trading and production
Incident
- Discovered
- May 4, 2022
- Materiality determined
- —
- Notification sent
- Nov 10, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notifying state regulators, as necessary
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 months(555 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.