Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
StrateBen
bd_06e53b4b0dc37169 · schema v1 · pii pii-v1
Full breach record for StrateBen →STRATeBEN, Inc. disclosed a phishing incident affecting 2 Vermont residents. An employee's Microsoft 365 account was compromised between August 14 and November 9, 2025, exposing names, Social Security numbers, and dates of birth. STRATeBEN secured the account, engaged a third-party cybersecurity firm, and mailed notifications on March 26, 2026, offering one year of credit monitoring.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-26-strateben-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 26, 2026
- Raw hash
- ad86d1ed15a26b8dd6810b3f52cdd8672eb74bba133e67c977c220d7c006cb02
Reporting entity
- Name
- StrateBennorm: strateben
- Domain
- strateben.com
Victim entity
- Name
- StrateBennorm: strateben
- Domain
- strateben.com
Incident
- Discovered
- Dec 3, 2025
- Materiality determined
- —
- Notification sent
- Mar 26, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.