HackingData ExfiltratedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTMediumContained
BROWN-FORMAN CORPORATION
bd_f7067c25a2400529 · schema v1 · pii pii-v1
Full breach record for BROWN-FORMAN CORPORATION →Brown-Forman Corporation disclosed a cyber attack where criminals stole records containing personal information of current and former employees, including SSNs, home addresses, and salary data. Suspicious activity was discovered on July 28, 2020. The company engaged forensic experts, contained the breach, and offered one year of credit monitoring.
California clockDiscovered Jul 28, 2020 → Notified Aug 25, 202028d ✓ CA 60-day OK28 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2dc4eddf8b717feaMaine State AGfiled 2021-05-10(258d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-193435
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2020
- Raw hash
- 2bd57d6c3cfdb8b91e1daba59259e1639bb48d9d25e354f24b87f53b1a17d6df
Reporting entity
- Name
- BROWN-FORMAN CORPORATIONnorm: brown forman
- Domain
- brown-forman.com
Victim entity
- Name
- BROWN-FORMAN CORPORATIONnorm: brown forman
- Domain
- brown-forman.com
Incident
- Discovered
- Jul 28, 2020
- Materiality determined
- —
- Notification sent
- Aug 25, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 28d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 28, 2020→ Notified: Aug 25, 202028d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.