HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Shah, Dixit & Associates PC
bd_0e7f5a9de996fdee · schema v1 · pii pii-v1
Full breach record for Shah, Dixit & Associates PC →Shah Dixit & Associates P.C. notified consumers of a data breach occurring on December 22, 2023. An unauthorized third party accessed systems containing names, addresses, SSNs, driver's license numbers, and financial account numbers. The firm engaged cybersecurity experts and law enforcement, implemented security measures, and offered 24 months of identity monitoring.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_f6d6259d8b60b504Indiana State AGfiled 2024-03-07(29d gap)Verified
- bd_92fd4eb43279a6cfMaine State AGfiled 2024-03-08(30d gap)Candidate
- bd_efc515400ed296bfNew Hampshire State AGfiled 2024-03-08(30d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-07-shah-dixit-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2024
- Raw hash
- 3c5a81fe136303a0636b277bfe4b3f65066842e995a13781aeaa1d8892a13010
Reporting entity
- Name
- Shah, Dixit & Associates PCnorm: shah dixit associates
- Domain
- shahdixit.com
Victim entity
- Name
- Shah, Dixit & Associates PCnorm: shah dixit associates
- Domain
- shahdixit.com
Incident
- Discovered
- Dec 22, 2023
- Materiality determined
- Feb 26, 2024
- Notification sent
- Feb 7, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- working with law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.