HackingOtherCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

The Burton Corporation

bd_cde574d7ca10b127 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2023

Filed

May 26, 2024

To disclose

16 months

Affected

Not disclosed

Confidence

68%

Full breach record for The Burton Corporation →3 incidents on file

The Burton Corporation notified Vermont AG of a data breach discovered on Feb 11, 2023. Suspicious activity led to the potential access of files containing names, SSNs, and financial account info. 25 Rhode Island residents were explicitly identified as affected. The company reset passwords, engaged forensic specialists, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday16 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 16 months / 470 days

Feb 11, 2023

Discovered

May 26, 2024

Filed

vs. sector median

+59 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The Burton Corporation
norm: the burton

Name: The Burton Corporation
norm: the burton
Industry: Otherllm

Discovered: Feb 11, 2023
Materiality determined: —
Notification sent: May 26, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified relevant state and federal regulatorsReported this incident to law enforcement

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of relevant systems
Reset relevant account passwords
Reviewed the contents of the impacted systems
Reviewed internal systems to identify contact information
Notified potentially affected individuals
Notified relevant state and federal regulators
Reported this incident to law enforcement
Offering complimentary access to Experian’s IdentityWorks
Changes made: Reviewing existing policies and procedures to reduce the likelihood of a similar future incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 months(470 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-05-26-burton-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2024
Raw hash: 8f8f103ea762c2e419055b209d2e8a364cdbd72de2389333020e4693bdcef989

Reporting entityThe Burton Corporation

Victim entityThe Burton Corporation

Incidentdiscovered Feb 11, 2023

Stated responseMoved quickly to investigate and respond to the incident

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov