HackingData ExfiltratedPIIIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Credit Control Corporation
bd_bb8e2d55817bb420 · schema v1 · pii pii-v1
Full breach record for Credit Control Corporation →Credit Control Corporation (CCC) notified consumers of a data security incident occurring March 2-7, 2023, discovered March 7, 2023. Unusual activity led to files being copied from CCC's network. Data potentially involved account holder names and financial account data. CCC engaged forensic specialists, isolated systems, notified law enforcement, and offered 1 year of credit monitoring via Kroll. No evidence of specific individual data copying, but possibility not ruled out.
Vermont clock✗ VT AG >45 bday40 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-06-13-credit-control-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2026
- Raw hash
- 53343812c626f1628847ab2b5cd3713b12cd574a553442ea8bb8818d6d4afe87
Reporting entity
- Name
- Credit Control Corporationnorm: credit control
- Domain
- creditcontrol.net
Victim entity
- Name
- Credit Control Corporationnorm: credit control
- Domain
- creditcontrol.net
Incident
- Discovered
- Mar 7, 2023
- Materiality determined
- —
- Notification sent
- May 4, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 40 months(1194 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.