HackingRetail & ConsumerRetailCustomer Data InvolvedPIILowContained

Nutrabolt

bd_b84d71b25e887dad · schema v1 · pii pii-v1

Severity

Low

Discovered

May 11, 2022

Filed

Jan 26, 2023

To disclose

37 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Nutrabolt →

Nutrabolt notified consumers of a data breach where an unauthorized third party gained access to its computer network on or about May 11, 2022. The company engaged forensic investigators and determined the actor no longer has access. Personal information may have been accessed or acquired. No specific data types or counts were disclosed in the notice.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday37 weeks discovery → filing

Incident timeline

discovery → filing · 37 weeks / 260 days

May 11, 2022

Discovered

Jan 26, 2023

Filed

vs. sector median

+30 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Nutrabolt
norm: nutrabolt

Name: Nutrabolt
norm: nutrabolt
Industry: Retail & Consumerllm

Discovered: May 11, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged a leading forensic security firm to conduct a thorough investigation
Identified and taken steps to correct the technical issue
Implemented additional security measures to mitigate the potentiality of any future incidents
Changes made: Implemented additional security measures to mitigate the potentiality of any future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(260 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-01-26-woodbolt-distribution-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2023
Raw hash: 691c6a1853c59a1c45daa0108c9ab6de0c3c8efdfdf4f9a4f18669b65b0b33bc

Reporting entityNutrabolt

Victim entityNutrabolt

Incidentdiscovered May 11, 2022

Stated responseEngaged a leading forensic security firm to conduct a thorough investigation

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov