PhysicalTheftCustomer Data InvolvedIDENTITY_BASICLowActive
Cramer Fish Sciences
bd_c4f0db92654f8bff · schema v1 · pii pii-v1
Full breach record for Cramer Fish Sciences →Cramer Fish Sciences notified Vermont AG that a laptop was stolen on March 21, 2023. The laptop was password protected, but the password may have been exposed. Potentially impacted data includes names and state identifiers. The company reported the theft to law enforcement and provided 12 months of credit monitoring and identity protection services through IDX. Investigation was ongoing at the time of notification.
Vermont clock⏱ VT AG >14 bday23 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_87af9af390af82ffMontana State AGfiled 2023-04-14(1d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-04-13-cramer-fish-sciences-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 13, 2023
- Raw hash
- 7fd6dec9fa9380966553a50935fa4ff27fab82fb0d76d997d3d05b235667129a
Reporting entity
- Name
- Cramer Fish Sciencesnorm: cramer fish sciences
Victim entity
- Name
- Cramer Fish Sciencesnorm: cramer fish sciences
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- —
- Notification sent
- Apr 13, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- Notified Vermont Attorney General's Office
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.