The company officially reported the breach to the Maine Attorney General, confirming that hackers had accessed names, Social Security numbers, and other personal identifiers.
In February 2023, Burton Corporation, a leading snowboarding and winter gear company, experienced a sophisticated cyberattack that disrupted its computer systems and ultimately impacted 5,170 individuals. The company officially reported the breach to the Maine Attorney General, confirming that hackers had accessed names, Social Security numbers, and other personal identifiers. The attack initially led to a system outage, preventing Burton from processing online orders and disrupting normal business operations. Although the company has acknowledged the breach, it has not disclosed details regarding the attackers' identity or the specific techniques used in the cyber intrusion. The investigation revealed that a limited number of files and folders were accessed or exfiltrated, but Burton has not confirmed whether any financial or payment information was compromised.
This incident marks the third official notification related to the same cyberattack, with the number of affected individuals increasing from an initially reported 737 to 5,170. Additionally, 41 Maine residents received separate notifications regarding their compromised data. In response, Burton has offered one year of free credit monitoring services to those affected, allowing them to monitor their financial activity for any signs of fraud or identity theft. While Burton has stated that it conducted a thorough investigation into the breach, cybersecurity experts warn that ongoing threats to customer data remain a serious concern. The company's lack of transparency regarding the nature of the attack raises further questions about the security measures in place before the breach and what steps Burton is taking to prevent future incidents.