HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Trionfo Holding Co., Inc.
bd_dec34a30bf2b00ab · schema v1 · pii pii-v1
Full breach record for Trionfo Holding Co., Inc. →Trionfo Solutions, LLC notified consumers of a data breach occurring between Dec 4-6, 2023. Unauthorized access to systems may have exposed names, addresses, DOBs, SSNs, and contact info. Trionfo secured systems, investigated, and offered one year of Experian IdentityWorks credit monitoring. No evidence of misuse found.
Vermont clock✗ VT AG >45 bday24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_4901e5c5dba35030Washington State AGfiled 2024-05-22Verified
- bd_685f3d5969f2ed6bHHS OCRfiled 2024-05-22Verified
- bd_6b934dbd36b1605aOregon State AGfiled 2024-05-22Verified
- bd_aa616cc297cf9989Montana State AGfiled 2024-05-22Verified
Show 3 more filings ↓Show fewer ↑
- bd_dae46939b90d3f10California State AGfiled 2024-05-22Verified
- bd_de1a151146b3cb6fNew Hampshire State AGfiled 2024-05-22Verified
- bd_f5206fdb62c3cda6Indiana State AGfiled 2024-05-22Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-22-trionfo-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2024
- Raw hash
- ed3dfb4f5dcf1308fb869315cbc07dc6bf4b14811403273270f39bf885d227fd
Reporting entity
- Name
- Trionfo Holding Co., Inc.norm: trionfo holding
- Domain
- trionfoholdings.com
Victim entity
- Name
- Trionfo Holding Co., Inc.norm: trionfo holding
- Domain
- trionfoholdings.com
Incident
- Discovered
- Dec 6, 2023
- Materiality determined
- May 22, 2024
- Notification sent
- May 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.