HackingData ExfiltratedPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Esha Corporation
bd_04d8ff229989d6a5 · schema v1 · pii pii-v1
Full breach record for Esha Corporation →ESHA, Inc. notified Vermont consumers of a data breach involving suspicious network activity detected July 19, 2024. Unauthorized access occurred July 13-17, 2024. Files containing PII and PHI may have been accessed. ESHA engaged forensic investigators, restored systems, and offered credit monitoring. The investigation was inconclusive regarding the extent of data compromise.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8315b50e76f21676New Hampshire State AGfiled 2024-11-15Verified
- bd_baf6c1d85817ed56Idaho State AGfiled 2024-11-15Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-11-15-esha-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 15, 2024
- Raw hash
- c32927c53a903c9db2854e97e6646753500729c9192c25a9a87ef3599046d3e5
Reporting entity
- Name
- Esha Corporationnorm: esha
Victim entity
- Name
- Esha Corporationnorm: esha
Incident
- Discovered
- Jul 19, 2024
- Materiality determined
- —
- Notification sent
- Nov 15, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.