Conner Strong & Buckelew Companies

On May 10, 2023, the Vermont Office of the Attorney General disclosed a data breach affecting **Conner Strong & Buckelew Companies**, where unauthorized actors gained access to certain employee email accounts between **February 7, 2022, and March 30, 2022**. The incident raised concerns over the potential exposure of **personal information** belonging to affected individuals, though the exact nature of the compromised data (e.g., financial records, identifiers, or sensitive employee details) and the total number of impacted parties were not specified.The company responded promptly by securing the breached accounts and initiating an investigation to assess the scope of the exposure. While no explicit confirmation of data theft or misuse was provided, the breach posed risks of **internal employee data leaks**, including possible exposure of confidential communications, personally identifiable information (PII), or corporate records stored in the compromised email accounts. The lack of clarity on the stolen data types and the absence of public reports on financial or operational repercussions suggest the impact was contained to **employee-related information**, though the long-term reputational and compliance risks remain a concern.

Source: https://ago.vermont.gov/document/2023-05-10-conner-strong-buckelew-companies-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/connerstrong&buckelew

"id": "con154082025",
"linkid": "connerstrong&buckelew",
"type": "Breach",
"date": "2/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'Conner Strong & Buckelew Companies',
                        'type': 'Company'}],
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Personal information '
                                              '(unspecified)']},
 'date_publicly_disclosed': '2023-05-10',
 'description': 'On May 10, 2023, the Vermont Office of the Attorney General '
                'reported a data breach involving Conner Strong & Buckelew '
                'Companies, which impacted the security of certain employee '
                'email accounts between February 7, 2022, and March 30, 2022. '
                'The breach potentially exposed personal information of '
                'affected individuals, though the specific types of '
                'information compromised and the exact number of individuals '
                'affected remain unknown. The company took immediate action to '
                'secure the accounts and analyze the extent of the breach.',
 'impact': {'data_compromised': True,
            'systems_affected': ['Employee email accounts']},
 'investigation_status': 'Ongoing (extent of breach under analysis)',
 'references': [{'date_accessed': '2023-05-10',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'response': {'containment_measures': ['Securing affected email accounts'],
              'incident_response_plan_activated': True},
 'title': 'Data Breach at Conner Strong & Buckelew Companies',
 'type': 'Data Breach'}