HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedIdentity (basic)LowContained

BKV Group

bd_0d6b381222fa2aa3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 15, 2025

Filed

Oct 27, 2025

To disclose

12 days

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for BKV Group →

BKV Group notified consumers of unauthorized access to systems occurring on or around September 2, 2025. The incident involved the acquisition of names and potentially other data elements. BKV Group engaged third-party specialists, secured systems, and offered complimentary credit monitoring via Cyberscout. No specific count of affected individuals was disclosed in the Vermont filing.

J jump to incidentP pin to compareR raw source

Vermont clock✓ VT AG ≤14 bday12 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 43 days

discovery → filing · 12 days

Sep 2, 2025

Begins

Oct 15, 2025

Discovered

Oct 27, 2025

Filed

vs. sector median

16 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_6cdb1ca2b99d2cfc2025-10-28 · +1dVerified
Indiana State AGbd_9051d07cd1186fca2025-10-28 · +1dVerified

Name: BKV Corporation
norm: bkv
Domain: bkv.com

Name: BKV Group
norm: bkv group
Industry: Professional Servicesllm

Discovered: Oct 15, 2025
Breach occurred: Sep 2, 2025
Undetected for: 43 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 27, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged third-party specialists to assist with understanding the nature and scope of the disruption
Worked to identify the data potentially at risk
Began a review to determine the types of information that may have been impacted
Confirmed up-to-date contact information to provide notification
Took steps to secure our systems
Enhanced the security of our network
Arranged for complimentary credit monitoring services through Cyberscout
Changes made: Enhanced the security of our network to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: VT AG ≤14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGOct 27 · first · this page

Massachusetts State AG+1d

Indiana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-10-27-bkv-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2025
Raw hash: 108638d05ba1190a1896198fcea4cbe84990f6d74294ab2f2c374dfaa7d458fc

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBKV Corporation

Victim entityBKV Group

Incidentdiscovered Oct 15, 2025

Stated responseEngaged third-party specialists to assist with understanding the nature and scope of the disruption

ComplianceVT AG ≤14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov