HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Carma Laboratories, Inc.
bd_c086d6e839b8db46 · schema v1 · pii pii-v1
Full breach record for Carma Laboratories, Inc. →Carma Laboratories, Inc. disclosed a cybersecurity incident to the Delaware Attorney General involving unauthorized access to its network on March 6, 2021. The breach potentially exposed personal information, including names, Social Security numbers, driver's license numbers, and bank account information, affecting one Delaware resident. Carma engaged forensic specialists, notified law enforcement, and provided one year of credit monitoring through Experian to the affected individual. Notification was sent on May 25, 2021.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9e40e50509ca8839Delaware State AGfiled 2021-05-25(4d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/06/Carma-Laboratories-Inc.-Exhibit-1-DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2021
- Raw hash
- 42cd5ec446514e27ffe9507d14d5816814afad0d0a332c828aab2ffc6d7ffc79
Reporting entity
- Name
- Carma Laboratories, Inc.norm: carma laboratories
Victim entity
- Name
- Carma Laboratories, Inc.norm: carma laboratories
Incident
- Discovered
- Mar 6, 2021
- Materiality determined
- —
- Notification sent
- May 25, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.