Burton Snowboards halted online orders after a February 2023 cyber incident
- Organization
- Burton Snowboards
- Exploit
- Hacking
- Industry
- Sporting Goods
Burton Snowboards, the Burlington, Vermont snowboard manufacturer founded in 1977 by Jake Burton Carpenter, stopped taking online orders in mid February 2023 after what it described as a cyber incident.
From 14 February the company displayed an outage notice on its website saying it was unable to process online orders, and it cancelled orders already placed. Customers were directed to buy through Burton retail stores or to use the company's newly launched online rental programme, which continued to ship equipment.
Burton said it was working closely with third party specialists to investigate the incident and determine its full nature and scope. It did not say how attackers reached its systems, whether any data had been taken, or when online ordering would resume. No group publicly claimed the attack.
The disruption ran well past the first announcement. PlanetSKI reported on 18 February that online sales were still suspended a week in, and noted Burton's point that its checkout is PCI compliant and does not retain card or bank account details. Coverage on 20 February said the incident was still affecting the company's operations.
As of the reporting date Burton had given no timeline for restoring online ordering and had not confirmed any compromise of customer data.
Updates
-
A supplemental filing with the Maine attorney general on May 26, 2023 raised the number of people affected to 5,282, up from the 737 Burton reported initially, and put the intrusion window at February 11 to March 9, 2023. The stolen data included Social Security numbers, driver's licence and state identification numbers, passport numbers and financial account information.
-
Burton later confirmed that customer data was taken. It determined on 7 April 2023 that names, Social Security numbers and financial account information were in the accessed files, and mailed notification letters in late May 2023.