HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Boise Consumer Cooperative, Inc.
bd_a1ce28cc0c1ec013 · schema v1 · pii pii-v1
Full breach record for Boise Consumer Cooperative, Inc. →Boise Consumer Cooperative, Inc. notified Vermont AG of a data breach discovered on September 24, 2025. Unauthorized access to files containing names and Social Security numbers occurred. The company engaged cybersecurity experts, notified the FBI, and offered Kroll identity protection services. No evidence of misuse was found. The total number of affected individuals was not disclosed in the filing.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7dfa7084eb34b79fMontana State AGfiled 2025-12-10Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-10-boise-consumer-cooperative-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 10, 2025
- Raw hash
- 8a1c50f0352809da0159a1d91875255247f2e716e595460053c4544db5872ff9
Reporting entity
- Name
- Boise Consumer Cooperative, Inc.norm: boise consumer cooperative
Victim entity
- Name
- Boise Consumer Cooperative, Inc.norm: boise consumer cooperative
Incident
- Discovered
- Sep 24, 2025
- Materiality determined
- —
- Notification sent
- Dec 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.