Burton Corporation, a prominent snowboarding brand, recently admitted that the cyber attack it endured in 2023 had a far-reaching impact on its customers, affecting 5,170 individuals—seven times more than originally reported. The attack, occurring around February 11, disrupted the company’s computer systems, resulting in the temporary suspension of online orders. The revelation of a “sophisticated cyber attack” on March 9 prompted Burton to launch an investigation, exposing a data breach where sensitive information, including names, social security numbers, and financial account details, had been exfiltrated. The affected individuals, primarily associated with the Chill Foundation, Burton’s youth development non-profit, were notified on May 26, 2023, confirming the compromise of their information.
A subsequent inquiry by Cyber Daily, based on the VenariX threat feed, discovered additional leaked data such as dates of birth, ID numbers, and passport details, intensifying the severity of the breach. Initially reported to affect 737 people, further filings, including a class action report, raised the estimate to as high as 5,282 impacted personnel. The breach underscores the growing challenges organizations face in safeguarding sensitive data against increasingly sophisticated cyber threats.