HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
PeopleGuru Holdings, Inc.
bd_0784df0b4b5da3a8 · schema v1 · pii pii-v1
Full breach record for PeopleGuru Holdings, Inc. →PeopleGuru Holdings, Inc. notified consumers of a cybersecurity event where an unauthorized third party accessed systems between July 6-9, 2025. Compromised data included names, SSNs, financial accounts, DOB, passport/license numbers, and medical/insurance info. PeopleGuru secured the network, investigated, and offered 12 months of credit monitoring via TransUnion. No evidence of fraud was found at the time of notice.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_0db930842d8375a2New Hampshire State AGfiled 2025-10-16Verified
- bd_362524c5e6273d1eOregon State AGfiled 2025-10-16Candidate
- bd_6b4c088fda1aae18Iowa State AGfiled 2025-10-16Verified
- bd_7bc498b6d4233e97Montana State AGfiled 2025-10-16Verified
Show 3 more filings ↓Show fewer ↑
- bd_9cb66c5f7c9d9dfeWashington State AGfiled 2025-10-16Verified
- bd_d01f13524ff1165dMaine State AGfiled 2025-10-16Verified
- bd_f7302e7c0355b774California State AGfiled 2025-10-16Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-16-peopleguru-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 16, 2025
- Raw hash
- f9fc17e4e5822892a3be32a602057bb13ea80ce7eeb928fc8b7493d031e2987d
Reporting entity
- Name
- PeopleGuru Holdings, Inc.norm: peopleguru holdings
Victim entity
- Name
- PeopleGuru Holdings, Inc.norm: peopleguru holdings
Incident
- Discovered
- Jul 9, 2025
- Materiality determined
- —
- Notification sent
- Oct 16, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.