HackingOtherDelayed DiscoveryIdentity (basic)Government IDMediumContained

Gnome, Inc.

bd_f2723e80136e60d3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 23, 2022

Filed

Mar 21, 2024

To disclose

17 months

Affected

Not disclosed

Linked

4 filings

Confidence

68%

Full breach record for Gnome, Inc. →2 incidents on file

Gnome, Inc. dba Gnome Landscapes notified consumers of a data breach discovered on October 23, 2022, involving unauthorized access to systems and acquisition of personal files. Confirmed data included names and government identifiers. The company engaged forensic experts, secured the network, and offered identity theft protection services. Notification was sent on March 21, 2024.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday17 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 17 months / 515 days

Oct 23, 2022

Discovered

Mar 21, 2024

Filed

vs. sector median

+66 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_0a46d073588765ac2024-03-21Candidate
Massachusetts State AGbd_49ff0729d865b1752024-03-21Verified
New Hampshire State AGbd_f1bb05cae83019d12024-03-21Verified

Name: Gnome, Inc.
norm: gnome

Name: Gnome, Inc.
norm: gnome
Also named: Gnome, Inc.dba oflegal entity
Gnome Landscapesdba oftrade name
Industry: Otherllm

Discovered: Oct 23, 2022
Materiality determined: —
Notification sent: Mar 21, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Took measures to further secure the network
Enlisted outside cybersecurity experts to conduct a forensic investigation
Implemented additional security measures
Offering identity theft protection services through IDX, A ZeroFox Company
Changes made: Implemented additional security measures to help reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 months(515 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMar 21 · first

Massachusetts State AGMar 21 · first

New Hampshire State AGMar 21 · first

Vermont State AGMar 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-03-21-gnome-landscapes-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 21, 2024
Raw hash: 5688a7db0c52b2e49fb7a17a2aef8602b390b39f61c44f972e3f89915ba7a984

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGnome, Inc.

Victim entityGnome, Inc.

Incidentdiscovered Oct 23, 2022

Stated responseTook measures to further secure the network

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov