The Vermont Office of the Attorney General disclosed a data breach affecting Wencor Group, which occurred between November 8–9, 2023. The incident involved a cyber criminal gaining unauthorized access to the company’s corporate systems, potentially compromising personal information, including names and other unspecified data of individuals. While the exact scope of the exposed data remains unclear, the breach raises concerns over the confidentiality and security of employee or customer records. The attack highlights vulnerabilities in Wencor Group’s cybersecurity defenses, as threat actors successfully infiltrated their systems. Although the report does not specify whether the breach led to financial fraud, identity theft, or broader operational disruptions, the exposure of personally identifiable information (PII) poses risks such as phishing attacks, reputational damage, or regulatory penalties. The delayed disclosure (reported in August 2024, nearly nine months after the incident) may further exacerbate trust issues with stakeholders. Given the nature of the breach unauthorized access to corporate systems with potential PII exposure it aligns with incidents where internal or customer data integrity is compromised, warranting heightened scrutiny of the company’s incident response and data protection measures.
Source: https://ago.vermont.gov/document/2024-08-01-wencor-group-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/beijing-wencor-huafeng-aviation-supplies-co.-ltd.
"id": "bei308091725",
"linkid": "beijing-wencor-huafeng-aviation-supplies-co.-ltd.",
"type": "Breach",
"date": "11/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'name': 'Wencor Group', 'type': 'Corporation'}],
'data_breach': {'data_exfiltration': 'Potential',
'personally_identifiable_information': ['Names'],
'type_of_data_compromised': ['Personal Information']},
'date_publicly_disclosed': '2024-08-01',
'description': 'The Vermont Office of the Attorney General reported a data '
'breach involving Wencor Group. The breach occurred between '
'November 8-9, 2023, when a cyber criminal gained unauthorized '
'access to corporate systems, potentially affecting personal '
'information including names and other unspecified data.',
'impact': {'data_compromised': ['Names', 'Unspecified personal information'],
'identity_theft_risk': 'Potential',
'systems_affected': ['Corporate systems']},
'references': [{'date_accessed': '2024-08-01',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'threat_actor': 'Cyber Criminal',
'title': 'Wencor Group Data Breach (November 2023)',
'type': 'Data Breach'}