HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
The Burton Corporation
bd_a3be66c627b7e9b2 · schema v1 · pii pii-v1
Full breach record for The Burton Corporation →The Burton Corporation reported an external system breach (hacking) occurring on 02/11/2023, discovered on 03/09/2023. The incident affected 737 individuals, including 7 Maine residents. Acquired information included names and Social Security Numbers. The company provided written notification on 03/27/2023 and offered 12 months of credit monitoring and identity restoration through Experian.
Maine clockDiscovered Mar 9, 2023 → Filed with AG Mar 28, 202319d ✓ ME AG ≤30d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_b411a07ae883b777Montana State AGfiled 2023-03-27(1d gap)Candidate
- bd_3e5a6127a2ab7763New Hampshire State AGfiled 2023-04-03(6d gap)Verified
- bd_20899ac2272e63aeMontana State AGfiled 2023-05-26(59d gap)Verified
- bd_38faeac6c1a72dbeCalifornia State AGfiled 2023-05-26(59d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 64d gap
- bd_e4ed3d5bfff45550Maine State AGfiled 2023-05-26(59d gap)Verified
- bd_21e20f52d57403b8New Hampshire State AGfiled 2023-05-31(64d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/027f1a31-da35-49fe-a73f-10d0caeb5224.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 28, 2023
- Raw hash
- da871c843a2ba8b7d3a8b5d56b58519b2c415cf9263652e856f76fe6a68918db
Reporting entity
- Name
- The Burton Corporationnorm: the burton
- Domain
- burton.com
Victim entity
- Name
- The Burton Corporationnorm: the burton
- Domain
- burton.com
Incident
- Discovered
- Mar 9, 2023
- Materiality determined
- —
- Notification sent
- Mar 27, 2023
- Affected individuals
- 737
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 9, 2023→ Filed with AG: Mar 28, 202319d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.