HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICLowActive
Vitagene, Inc.
bd_001b61c87860e726 · schema v1 · pii pii-v1
Full breach record for Vitagene, Inc. →Thorne Research, Inc. notified Vermont AG of unauthorized access to customer accounts on July 10, 2025. Attackers used valid credentials stolen from a third-party breach to access accounts. Affected data included DOB, last 4 digits of credit cards, and health profiles. Thorne engaged forensic investigators and forced password resets. Investigation is ongoing.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-11-thorne-research-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2025
- Raw hash
- 25e41691b6761cf8036eeb38466af10d3de8bc127ec400411ea4dc779f2b7e8d
Reporting entity
- Name
- Vitagene, Inc.norm: vitagene
- Domain
- thorne.com
Victim entity
- Name
- Vitagene, Inc.norm: vitagene
- Domain
- thorne.com
Incident
- Discovered
- Jul 10, 2025
- Materiality determined
- —
- Notification sent
- Sep 11, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.