norm: bcd travel usaUSno LEI · no CIKMax severity: Low

Canonical registry

BCD Travel USA LLC

ent_6ff23543739add09824cf48d

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

17

as filed · State AG NH

Leak-site claims

0

none in sample

Identity resolution

Canonical name: BCD Travel USA LLC
Normalized: bcd travel usa— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

⛰️New Hampshire State AGas victim2023-08-14
BCD Travel USA LLC notified the New Hampshire Attorney General of a cybersecurity incident involving the MOVEit Transfer application. The breach exploited a zero-day vulnerability (CVE-2023-34362) exploited by the CL0P ransomware group. Unauthorized access occurred on May 29, 2023, and was discovered by BCD on June 1, 2023. The incident resulted in the exfiltration of personal information belonging to 17 New Hampshire residents. BCD engaged forensic experts, took the application offline, and began notifying affected individuals on August 11, 2023, offering one year of credit monitoring.