Wianno Club

On December 14, 2023, the Vermont Office of the Attorney General disclosed a data breach affecting Wianno Club, which occurred around May 26, 2023. The incident involved unauthorized access to personal information of both employees and members (customers) of the club. While the exact scope of the breach—including the number of affected individuals and the specific types of compromised data—remains undisclosed, the exposure of personal details poses significant risks. The breach suggests potential identity theft, financial fraud, or reputational harm for those impacted. The delayed disclosure (nearly 7 months after the incident) further raises concerns about the organization’s incident response protocols. No ransomware involvement was reported, but the compromise of employee and customer data indicates a severe security lapse with broad implications for trust and operational integrity.

Source: https://ago.vermont.gov/document/2023-12-14-wianno-club-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/wianno-club

"id": "wia955091725",
"linkid": "wianno-club",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Hospitality/Recreation',
                        'location': 'Vermont, USA',
                        'name': 'Wianno Club',
                        'type': 'Private Club'}],
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Personal Information']},
 'date_publicly_disclosed': '2023-12-14',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Wianno Club that occurred on or around May '
                '26, 2023. The breach may have involved unauthorized access to '
                'personal information of employees and members, although the '
                'exact number of affected individuals and specific types of '
                'compromised information are currently unknown.',
 'impact': {'data_compromised': True, 'identity_theft_risk': True},
 'investigation_status': 'Ongoing (details unknown)',
 'references': [{'date_accessed': '2023-12-14',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Wianno Club Data Breach (May 2023)',
 'type': 'Data Breach'}