HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Penny Publications
bd_b583173a30dd52fa · schema v1 · pii pii-v1
Full breach record for Penny Publications →Penny Publications LLC reported a data security incident on August 3, 2023, where an unknown third party gained unauthorized access to its network. The incident exposed names, Social Security numbers, and banking information. The company engaged forensic consultants, secured systems, and offered 24 months of credit monitoring via Experian.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 67 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_81dd49200ac540a3Leak Siteakirafiled 2023-08-28(67d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_74bd6ca699e19159Montana State AGfiled 2023-11-06(3d gap)Verified by operator
- bd_ee784c58ec87c8c7Maine State AGfiled 2023-11-06(3d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-03-penny-publications-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 3, 2023
- Raw hash
- 8cab72f8163c5fe6b3ef7fd39887fce09a13c3540d602d581869ac460092dfd6
Reporting entity
- Name
- Penny Publicationsnorm: penny publications
Victim entity
- Name
- Penny Publicationsnorm: penny publications
Incident
- Discovered
- Aug 8, 2023
- Materiality determined
- Nov 3, 2023
- Notification sent
- Nov 3, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(87 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.