HackingData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIMediumContained
Lighthouse Ministries
bd_06aeb96f86c9bb5d · schema v1 · pii pii-v1
Full breach record for Lighthouse Ministries →Lighthouse Electric Company notified consumers of a data breach occurring between October 21-26, 2024. Unauthorized access resulted in the copying of files containing names, SSNs, bank account info, and health insurance data. The company secured systems, offered 24 months of credit monitoring via IDX, and enhanced safeguards. Law enforcement was not involved in delaying the notice.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_243b60690390d0e2Maryland State AGfiled 2025-02-04Verified
- bd_39672159e2d0d898New Hampshire State AGfiled 2025-02-04Verified
- bd_ac8653c82aeb1927Indiana State AGfiled 2025-02-04Verified
- bd_bb1c6ebf28ef1372Montana State AGfiled 2025-02-04Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-04-lighthouse-electric-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2025
- Raw hash
- e1636d0c09ec74dda52f1abb98b02ae480bfbfb1873bb2925e4cb6c5211cd686
Reporting entity
- Name
- Lighthouse Ministriesnorm: lighthouse ministries
- Domain
- lighthousemin.org
Victim entity
- Name
- Lighthouse Ministriesnorm: lighthouse ministries
- Domain
- lighthousemin.org
Incident
- Discovered
- Oct 26, 2024
- Materiality determined
- —
- Notification sent
- Feb 4, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notice has not been delayed by law enforcement
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.