HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)PHIBiometricMediumContained

Kuck Baxter Immigration, LLC

bd_12bc3195440c0e8e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2024

Filed

Aug 19, 2025

To disclose

18 months

Affected

Not disclosed

Linked

2 filings

Confidence

67%

Full breach record for Kuck Baxter Immigration, LLC →

Kuck Baxter Immigration, LLC notified consumers of unauthorized access to its network discovered on February 27, 2024. The firm engaged forensic consultants and secured systems. A review completed on March 21, 2025, confirmed exposure of personal information including names, dates of birth, SSNs, driver's licenses, passport numbers, bank account numbers, credit/debit card numbers, medical history, treatment information, diagnoses, insurance information, and biometric identifiers. The company is offering 12 months of credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday18 months discovery → filing

Incident timeline

discovery → filing · 18 months / 539 days

Feb 27, 2024

Discovered

Aug 19, 2025

Filed

vs. sector median

+57 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Nebraska State AGbd_3036580e08290a412025-08-19Candidate

Name: Kuck Baxter Immigration, LLC
norm: kuck baxter immigration

Name: Kuck Baxter Immigration, LLC
norm: kuck baxter immigration
Industry: Professional Servicesllm

Discovered: Feb 27, 2024
Materiality determined: —
Notification sent: Aug 19, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHIBiometric
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged the appropriate forensic consultants to investigate the root of the incident
Secure its systems
Conducted a thorough review of the contents of the files to determine if they contained any sensitive information
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Continuously upgrading our already robust security measures to carefully safeguard against similar incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 months(539 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Nebraska State AGAug 19 · first

Vermont State AGAug 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-08-19-kuck-baxter-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2025
Raw hash: ea8e6b31aa708073963d60f2843d28c8b29a7038688fdb81f291edf69376ee56

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKuck Baxter Immigration, LLC

Victim entityKuck Baxter Immigration, LLC

Incidentdiscovered Feb 27, 2024

Stated responseEngaged the appropriate forensic consultants to investigate the root of the incident

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov