Bunkhouse Group
bd_dd075760084aac0e · schema v1 · pii pii-v1
Full breach record for Bunkhouse Group →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Data Breach Notification. Bunkhouse Management, LLC: In June 2024, Bunkhouse Management, LLC discovered unauthorized activity on its systems, during which an individual accessed and copied files containing personal data. The exposed information included names, Social Security or taxpayer identification numbers, driver’s license numbers, health and medical information, financial account data, and payment card details. Bunkhouse secured its systems, conducted a thorough investigation, and is offering twelve months of free credit monitoring and identity theft protection to affected individuals. The cyberattack was claimed by bianlian on 2024-07-24. Linked ransomware group: bianlian.
P pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jun 1, 2024
Press report
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
If an SEC 8-K, state-AG notice or victim statement lands, DisclosureLens merges it into an incident and links it here.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
bianlian
According to ransomware.live, BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.