Vermont data breach notifications

Notification required to the Vermont Attorney General within 14 business days of discovery for breaches affecting Vermont consumers.

How DisclosureLens indexes Vermont filings

DisclosureLens polls the Vermont AG portal on a regular schedule, fetches each new notice, extracts a structured BreachDisclosure v1 record, resolves the affected entity to its LEI/CIK when possible, and publishes via the REST API (webhooks and STIX/TAXII delivery are planned).

Extraction provenance

Extracted records carry per-field source citations into the Vermont AG notice they came from, plus a per-record confidence score and a full extraction audit trail. Vermont filings inherit the same BreachDisclosure v1 schema as SEC 8-Ks, HHS OCR notices, and EU DPA registers — same fields, same provenance metadata, deduped against same-incident filings in other jurisdictions. Full pipeline details: Sources & Methodology.

Statute

9 V.S.A. § 2435

Authoritative source

https://ago.vermont.gov/cap/security-breaches/

Corrections

Email corrections@disclosurelens.com — 48-hour SLA from receipt.