HackingStolen CredentialsData ExfiltratedData PublishedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Godbey Law LLC
bd_08497e278775bde8 · schema v1 · pii pii-v1
Full breach record for Godbey Law LLC →Godbey Law, LLC notified Vermont AG of a September 2023 data breach where an unauthorized third party accessed systems containing client PII, including SSNs, driver's licenses, and financial account data. The firm engaged forensic assistance, upgraded security controls (MFA, SOC), and offered credit monitoring. Data was posted to the dark web.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by dispossessor about this victim predates this filing by 133 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_ea5c96ec08cc8cb1Leak Sitedispossessorfiled 2023-08-31(133d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_67ae63cfe449ac38Indiana State AGfiled 2024-01-11Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-01-11-godbey-law-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 11, 2024
- Raw hash
- de195407674050ece7d745d8a4e0aa048870b7fe26dd4762d0892fe1dd21f45b
Reporting entity
- Name
- Godbey Law LLCnorm: godbey law
- Domain
- godbeylaw.com
Victim entity
- Name
- Godbey Law LLCnorm: godbey law
- Domain
- godbeylaw.com
Incident
- Discovered
- Sep 8, 2023
- Materiality determined
- —
- Notification sent
- Jan 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.