HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Carriage Purchaser, Inc.
bd_9eb8c246c3e4d5f6 · schema v1 · pii pii-v1
Full breach record for Carriage Purchaser, Inc. →Carriage Purchase, Inc. d/b/a PS Logistics notified consumers of a data breach occurring on February 20, 2024. Unauthorized access to the network resulted in the removal of files containing personal information, including names, SSNs, and financial account numbers. PS Logistics engaged external cybersecurity professionals for forensic investigation and is offering 12 months of complimentary identity theft protection services through Equifax to affected individuals.
Vermont clock✗ VT AG >45 bday43 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e2acdc2b9012afb0Montana State AGfiled 2024-12-19(1d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-20-carriage-purchase-dba-ps-logistics-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 20, 2024
- Raw hash
- 6a69bc72b3c7dd860b449149255c918141886b12cdeaf74a064826655768baa4
Reporting entity
- Name
- Featherdale Carriage Companynorm: featherdale carriage
- Domain
- featherdalecarriagecompany.com
Victim entity
- Name
- Carriage Purchaser, Inc.norm: carriage purchaser
Incident
- Discovered
- Feb 20, 2024
- Materiality determined
- —
- Notification sent
- Dec 19, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 43 weeks(304 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.