HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Byzfunder
bd_b509b1d4298b45db · schema v1 · pii pii-v1
Full breach record for Byzfunder →Byzfunder NY LLC notified consumers of a data breach involving unauthorized access to files containing names and Social Security numbers. The incident occurred between September 1 and 20, 2025, and was detected on September 19, 2025. The company engaged cybersecurity specialists, enhanced network security, and offered 12-24 months of identity theft protection services. No evidence of misuse was found.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_11c98c86d13e9cceIndiana State AGfiled 2025-11-19Verified
- bd_2e25036dbbde0fadCalifornia State AGfiled 2025-11-19Verified
- bd_46884e144d93c1faMontana State AGfiled 2025-11-19Candidate
- bd_988b70ab3debf6c5New Hampshire State AGfiled 2025-11-19Verified
Show 1 more filing ↓Show fewer ↑up to 2d gap
- bd_c440239b10f08ee5Texas State AGfiled 2025-11-21(2d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-19-byzfunder-ny-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2025
- Raw hash
- 987e1bbe75cc98ca7749e2d96d39da586b4726145e09111bd95a7926f1f5afe4
Reporting entity
- Name
- Byzfundernorm: byzfunder
- Domain
- byzfunder.com
Victim entity
- Name
- Byzfundernorm: byzfunder
- Domain
- byzfunder.com
Incident
- Discovered
- Sep 19, 2025
- Materiality determined
- —
- Notification sent
- Nov 19, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.