S&K Manufacturing, Inc.

The Vermont Office of the Attorney General disclosed a **data breach** affecting **S&K Manufacturing**, which occurred between **September 18, 2020, and February 3, 2022**. Unauthorized actors gained access to **customer payment card information**, though the exact number of impacted individuals and the full scope of compromised data remain undisclosed. The breach exposed sensitive financial details, potentially enabling fraudulent transactions or identity theft. While the company detected the intrusion, the delayed discovery (over **17 months**) raises concerns about prolonged exposure of customer data. The incident highlights vulnerabilities in payment processing systems, risking financial losses for affected customers and reputational damage for S&K Manufacturing. No evidence suggests broader data exfiltration (e.g., personal identifiers beyond payment cards), but the focus on financial records aligns with targeted cybercriminal activity, likely for monetary gain.

Source: https://ago.vermont.gov/document/2023-02-21-sk-manufacturing-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/s-&-k-tool-&-die-co.-inc

"id": "s-&210082125",
"linkid": "s-&-k-tool-&-die-co.-inc",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Manufacturing',
                        'name': 'S&K Manufacturing',
                        'type': 'Manufacturing'}],
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['payment card information']},
 'date_publicly_disclosed': '2023-02-21',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving S&K Manufacturing on February 21, 2023. The '
                'breach occurred between September 18, 2020, and February 3, '
                '2022, with unauthorized access to customer payment card '
                'information, but the number of affected individuals and '
                'additional details about the types of information compromised '
                'are currently unknown.',
 'impact': {'data_compromised': ['payment card information'],
            'payment_information_risk': 'Yes'},
 'references': [{'date_accessed': '2023-02-21',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at S&K Manufacturing',
 'type': 'Data Breach'}