HackingStolen CredentialsTargetedIDENTITY_BASICLowContained
New Jersey Compensation Rating & Inspection Bureau
bd_0f05d5d7fa926611 · schema v1 · pii pii-v1
Full breach record for New Jersey Compensation Rating & Inspection Bureau →New Jersey Compensation Rating & Inspection Bureau (NJCRIB) notified consumers of a data breach where an outside threat actor accessed systems between July 8 and August 5, 2025. Administrative files containing names and contact information were copied. NJCRIB engaged external cybersecurity specialists, reported to federal law enforcement, and is offering credit monitoring and identity restoration services to affected individuals.
Vermont clock✗ VT AG >45 bday30 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-04-compensation-rating-inspection-bureau-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2026
- Raw hash
- ea65712110bf82ace7515a38698d71655175ce5acada8e57f97bceac4ada97fa
Reporting entity
- Name
- Compensation Rating & Inspection Bureaunorm: compensation rating inspection bureau
Victim entity
- Name
- New Jersey Compensation Rating & Inspection Bureaunorm: new jersey compensation rating inspection bureau
Incident
- Discovered
- Jul 8, 2025
- Materiality determined
- —
- Notification sent
- Feb 4, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- promptly reported the event to federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 30 weeks(211 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.