HackingTargetedIDENTITY_BASICLowContained
Brown & Streza, LLP
bd_0663a08426d27125 · schema v1 · pii pii-v1
Full breach record for Brown & Streza, LLP →Brown & Streza, LLP notified consumers of a data breach discovered on January 18, 2023. An unknown actor gained unauthorized access to the firm's network. The firm engaged forensic experts, secured the network, and reported the incident to law enforcement. Consumers were offered 12 months of credit monitoring and identity theft protection through Experian IdentityWorks.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9cf9bf5bf5fe645cMontana State AGfiled 2023-05-12Candidate
- bd_a3fdea8d506e3240California State AGfiled 2023-05-12Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-12-brown-streza-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2023
- Raw hash
- 77fda757add5b932b6deaad9e1e429b18a0f3102a9fca46dc77e772b5f13ecb2
Reporting entity
- Name
- Brown & Streza, LLPnorm: brown streza
- Domain
- brownandstreza.com
Victim entity
- Name
- Brown & Streza, LLPnorm: brown streza
- Domain
- brownandstreza.com
Incident
- Discovered
- Jan 18, 2023
- Materiality determined
- May 12, 2023
- Notification sent
- May 12, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the incident to law enforcement
Compliance
- Time to disclose
- 16 weeks(114 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.