HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The Hillman Group
bd_da0bc41c395a5435 · schema v1 · pii pii-v1
Full breach record for The Hillman Group →The Hillman Group notified consumers of a data breach where an unauthorized third party accessed the network between May 30 and June 2, 2023. The incident compromised names and government identifiers. The company engaged forensic investigators, reviewed security measures, and offered one year of Equifax credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_16d6fc8340674ec1Montana State AGfiled 2023-11-07(1d gap)Candidate
- bd_1990bbd539795816Maine State AGfiled 2023-11-07(1d gap)Verified
- bd_eaea3bd25d9e9144New Hampshire State AGfiled 2023-11-07(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-06-hillman-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2023
- Raw hash
- 65307a18e8a2f51d81aab424557f926d02efbf4db5708cbb0ae61e5a6ab2b05f
Reporting entity
- Name
- The Hillman Groupnorm: the hillman
Victim entity
- Name
- The Hillman Groupnorm: the hillman
Incident
- Discovered
- Jun 2, 2023
- Materiality determined
- —
- Notification sent
- Nov 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.