HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

American National Standards Institute

bd_cebeddc383cd1ffc · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 22, 2022

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for American National Standards Institute →2 incidents on file

American National Standards Institute (ANSI) notified consumers of a data breach involving unauthorized access to employee email accounts between Dec 2020 and Nov 2021. The incident may have exposed employee PII, including SSNs, driver's licenses, and health insurance info. ANSI offered one year of Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 4, 2020

Begins

Sep 22, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: American National Standards Institute
norm: american national standards institute

Name: American National Standards Institute
norm: american national standards institute
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 4, 2020 – Nov 19, 2021
Materiality determined: —
Notification sent: Sep 22, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Offering you a complimentary one-year membership to Kroll’s identity monitoring service
Took steps to secure the network
Began an investigation
Taken steps to enhance the security of our computer systems
Changes made: Enhance the security of our computer systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2022-09-22-american-national-standards-institute-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2022
Raw hash: c6efe60ab4e4e85f9827907ec2e376726ec36768f6b4ae066db45a84335aa62b

Reporting entityAmerican National Standards Institute

Victim entityAmerican National Standards Institute

IncidentUnauthorized Access

Stated responseOffering you a complimentary one-year membership to Kroll’s identity monitoring service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov