HackingStolen CredentialsTargetedIDENTITY_BASICPIILowResolved
EISNER ADVISORY GROUP LLC
bd_0e87a3f3a7019a00 · schema v1 · pii pii-v1
Full breach record for EISNER ADVISORY GROUP LLC →Eisner Advisory Group LLC notified consumers of a data breach occurring September 4-9, 2023. Unauthorized access was limited to specific files containing names and other personal information. The investigation is concluded. Eisner notified regulators and law enforcement, and is offering 12-24 months of credit monitoring. No evidence of misuse was found.
Vermont clock✗ VT AG >45 bday20 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_27e512fd0cdac557New Hampshire State AGfiled 2025-04-08Verified
- bd_61c9ad8db06a18a3Washington State AGfiled 2025-04-08Candidate
- bd_9c143312e5d526b8Iowa State AGfiled 2025-04-08Verified
- bd_bd4df5a263203c7dOregon State AGfiled 2025-04-08Verified
Show 3 more filings ↓Show fewer ↑
- bd_e35702ee8e886a3fMontana State AGfiled 2025-04-08Verified
- bd_ea112341cfa5a4d9Indiana State AGfiled 2025-04-08Verified
- bd_ed6f19b468a372e9California State AGfiled 2025-04-08Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-08-eisner-advisory-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2025
- Raw hash
- 01f6cf5fe7a114354bebd170d32ad0f3956782ef72812523ca4c53226c543c40
Reporting entity
- Name
- EISNER ADVISORY GROUP LLCnorm: eisner advisory
Victim entity
- Name
- EISNER ADVISORY GROUP LLCnorm: eisner advisory
Incident
- Discovered
- Sep 1, 2023
- Materiality determined
- Apr 8, 2025
- Notification sent
- Apr 8, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified state and industry regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 months(585 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.