HackingDelayed DiscoveryIDENTITY_BASICLowContained
Milk Source, LLC
bd_d498a0c31e7c25b2 · schema v1 · pii pii-v1
Full breach record for Milk Source, LLC →Milk Source LLC notified Vermont consumers of a data breach where an unauthorized actor accessed files containing names and other personal info from Oct 9-10, 2023. The incident was discovered on Oct 10, 2023, and notification was sent in August 2024. Milk Source engaged cybersecurity experts and offered 12 months of identity protection services.
Vermont clock✗ VT AG >45 bday45 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 307 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_cc8149426d8987c3Leak Siteplayfiled 2023-10-20(307d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_643957d2431d9280Indiana State AGfiled 2024-08-23Verified
- bd_8df1262132f4f8e7Montana State AGfiled 2024-08-23Candidate
- bd_babb8183ee614a49Maine State AGfiled 2024-08-23Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-23-milk-source-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2024
- Raw hash
- ffe4bd429ae20062bfb4ab770ad4b8884fbbea64ebaa94383b461a953d2833cd
Reporting entity
- Name
- Milk Source, LLCnorm: milk source
- Domain
- milksource.com
Victim entity
- Name
- Milk Source, LLCnorm: milk source
- Domain
- milksource.com
Incident
- Discovered
- Oct 10, 2023
- Materiality determined
- Aug 23, 2024
- Notification sent
- Aug 12, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 45 weeks(318 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.