HackingData ExfiltratedIDENTITY_BASICPIILowContained
Carvin Audio
bd_b9b266fe06fc8de9 · schema v1 · pii pii-v1
Full breach record for Carvin Audio →Carvin Software, LLC notified consumers of a data breach where unauthorized access to its network resulted in the copying of files containing names and other personal information between Feb 22 and Mar 9, 2023. The incident was discovered on Mar 9, 2023. Carvin isolated systems, engaged in investigation, notified federal law enforcement, and offered complimentary credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 10 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- bd_a5615bf8e5598a2bCalifornia State AGfiled 2023-05-19Verified
- bd_e3da1816f9fc0621California State AGfiled 2023-05-17(2d gap)Verified
- bd_298585b51b9c0d49New Hampshire State AGfiled 2023-05-09(10d gap)Verified
- bd_1a019f0dc61bda8dMontana State AGfiled 2023-05-02(17d gap)Candidate
Show 5 more filings ↓Show fewer ↑up to 17d gap
- bd_607315800f92712cMaine State AGfiled 2023-05-02(17d gap)Verified
- bd_8d65e705d3015f8dOregon State AGfiled 2023-05-02(17d gap)Verified
- bd_b7d614e4113908f9Washington State AGfiled 2023-05-02(17d gap)Verified
- bd_d533a09a64f4a304California State AGfiled 2023-05-02(17d gap)Verified
- bd_f4854483539e0301Delaware State AGfiled 2023-05-02(17d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-19-carvin-software-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2023
- Raw hash
- 2b60520f48a442a96a34d26a80ce7b8aa2de73bc8251177ae62b930d9fcb6597
Reporting entity
- Name
- Carvin Audionorm: carvin audio
- Domain
- carvinaudio.com
Victim entity
- Name
- Carvin Audionorm: carvin audio
- Domain
- carvinaudio.com
Incident
- Discovered
- Mar 9, 2023
- Materiality determined
- —
- Notification sent
- May 19, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 10 weeks(71 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.