HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
The Burton Corporation
bd_cde574d7ca10b127 · schema v1 · pii pii-v1
Full breach record for The Burton Corporation →The Burton Corporation notified Vermont AG of a data breach discovered on Feb 11, 2023. Suspicious activity led to the potential access of files containing names, SSNs, and financial account info. 25 Rhode Island residents were explicitly identified as affected. The company reset passwords, engaged forensic specialists, notified law enforcement, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed25 affectedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-26-burton-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2024
- Raw hash
- 8f8f103ea762c2e419055b209d2e8a364cdbd72de2389333020e4693bdcef989
Reporting entity
- Name
- The Burton Corporationnorm: the burton
Victim entity
- Name
- The Burton Corporationnorm: the burton
Incident
- Discovered
- Feb 11, 2023
- Materiality determined
- —
- Notification sent
- May 26, 2024
- Affected individuals
- 25
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified relevant state and federal regulatorsReported this incident to law enforcement
Compliance
- Time to disclose
- 16 months(470 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.