HackingStolen CredentialsData ExfiltratedTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Compex Legal Services
bd_0e0c8e276e11a0dc · schema v1 · pii pii-v1
Full breach record for Compex Legal Services →Compex Legal Services Inc. disclosed a data breach where unauthorized access occurred between April 9 and April 17, 2024. The incident involved the acquisition of files containing PII and government identifiers (SSN, DOB) of individuals involved in insurance claims or litigation. Compex engaged third-party cybersecurity specialists, notified law enforcement, and offered credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 116 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_0588ccacc7611641Leak Sitecl0pfiled 2024-05-04(116d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_27ddf809b97c17eeCalifornia State AGfiled 2024-08-30(1d gap)Verified
- bd_37494d5f18dc2ef3California State AGfiled 2024-07-24(36d gap)Verified
- bd_953495f025c39606Wisconsin State AGfiled 2024-07-24(36d gap)Verified
- bd_d56b2efa27580456California State AGfiled 2024-10-25(57d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-29-compex-legal-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2024
- Raw hash
- a38df1a4300a2ebd81df1bd14cd33e295a1d1822b5cbae8dd2d9f8588c241e20
Reporting entity
- Name
- Compex Legal Servicesnorm: compex legal
- Domain
- compexlegal.com
Victim entity
- Name
- Compex Legal Servicesnorm: compex legal
- Domain
- compexlegal.com
Incident
- Discovered
- Apr 17, 2024
- Materiality determined
- —
- Notification sent
- Aug 29, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the event to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(134 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.