HackingData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSCREDENTIALSMediumContained
Laboratory Services Cooperative
bd_102212ae480e10da · schema v1 · pii pii-v1
Full breach record for Laboratory Services Cooperative →Laboratory Services Cooperative (LSC) disclosed a security incident identified on October 27, 2024, where an unauthorized third party accessed and removed files from its network. The breach potentially exposed patient and worker data, including medical records, health insurance info, billing/payment data, and government identifiers (SSN, driver's license). LSC engaged forensic specialists, notified law enforcement, and is offering credit/medical identity monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_18cb69ce78d99e82Washington State AGfiled 2025-04-10Candidate
- bd_721c52ac63a845caOregon State AGfiled 2025-04-10Verified
- bd_891e39ad753077a2Indiana State AGfiled 2025-04-10Verified
- bd_b2eb717e40560ef3Maine State AGfiled 2025-04-10Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_c3c9c68a034fcdd4Iowa State AGfiled 2025-04-10Verified
- bd_3b53713c4b166ab5California State AGfiled 2025-04-09(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-10-laboratory-services-cooperative-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2025
- Raw hash
- 094c792226be2263507a544b2ccc5fa330847e4cf7ea7df9eb556e67579aa6e6
Reporting entity
- Name
- Laboratory Services Cooperativenorm: laboratory services cooperative
Victim entity
- Name
- Laboratory Services Cooperativenorm: laboratory services cooperative
Incident
- Discovered
- Oct 27, 2024
- Materiality determined
- —
- Notification sent
- Apr 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(165 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.