HackingCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowActive

The Burton Corporation

bd_dfcebd5c646e5585 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 11, 2023

Filed

Feb 6, 2024

To disclose

51 weeks

Affected

64state residents only

Linked

5 filings

Confidence

66%

Full breach record for The Burton Corporation →3 incidents on file

Burton Corporation filed a supplemental breach notification with the New Hampshire Attorney General on February 6, 2024, reporting unauthorized access affecting 64 additional NH residents. The incident was first discovered on February 11, 2023, when suspicious activity impacted system operability. Personal information, including names, was potentially accessed. Burton engaged forensic specialists, reset passwords, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 51 weeks / 360 days

Feb 11, 2023

Discovered

Oct 13, 2023

Scope determined

Feb 6, 2024

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_2ef5adbcecd95b9c2024-02-06Candidate
Oregon State AGbd_aa5f698272349f242024-02-06Verified by operator
California State AGbd_ce1bd7de7cff6fe22024-02-06Verified
Vermont State AGbd_79151f2b273a2ac42024-02-05 · +1dVerified

Name: The Burton Corporation
norm: the burton

Name: The Burton Corporation
norm: the burton

Discovered: Feb 11, 2023
Materiality determined: Oct 13, 2023
Notification sent: Mar 27, 2023
Affected individuals: 64state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notified federal law enforcement regarding the incidentnotifying relevant state regulators, as required

During the incident: Moved quickly to investigate and respond to the incident
Assess the security of Burton systems
Reset relevant account passwords
Began reviewing the contents of impacted systems to determine whether they contained personal information
Notified federal law enforcement regarding the incident
Working to implement additional safeguards and training to its employees
Reviewing existing policies and procedures to reduce the likelihood of a similar future incident
Providing access to credit monitoring services for individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Notifying relevant state regulators, as required
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Engaged industry-leading computer forensics specialists
Changes made: Implementing additional safeguards and training to its employees
Reviewing existing policies and procedures to reduce the likelihood of a similar future incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(360 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGFeb 5 · first

Maine State AG+1d

Oregon State AG+1d

California State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/burton-corporation-20240206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2024
Raw hash: 54da5c20f77b95667519ca6492e29374beb1ec63f309a5ad3a5b97c0a434261a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Burton Corporation

Victim entityThe Burton Corporation

Incidentdiscovered Feb 11, 2023

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov