HackingDelayed DiscoveryPIIIDENTITY_BASICLowContained
GREAT BAY DISTRIBUTORS, INC.
bd_e279e0e28c2c69d0 · schema v1 · pii pii-v1
Full breach record for GREAT BAY DISTRIBUTORS, INC. →Great Bay Distributors, Inc. notified consumers of a data breach discovered on December 16, 2023, involving unauthorized network access. The incident may have exposed names and other personal information. Great Bay engaged third-party cybersecurity specialists, secured its network, and reported the incident to law enforcement. The company is offering credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9450f85524403ac3Maine State AGfiled 2024-05-13Candidate
- bd_b1013c951800d37cNew Hampshire State AGfiled 2024-05-13Verified
- bd_cac14742c1e13527Indiana State AGfiled 2024-05-13Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-13-great-bay-distributors-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 13, 2024
- Raw hash
- fbf09a1af0d8389b01eb2b5cf0cce9e1a7d7563cc0e563c775c5e4bda9f31fe0
Reporting entity
- Name
- GREAT BAY DISTRIBUTORS, INC.norm: great bay distributors
Victim entity
- Name
- GREAT BAY DISTRIBUTORS, INC.norm: great bay distributors
Incident
- Discovered
- Dec 16, 2023
- Materiality determined
- —
- Notification sent
- May 13, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- reported this incident to law enforcementreporting to regulatory authorities, as required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(149 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.