Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Centinel Financial Group, LLC
bd_1319b68447dec1b4 · schema v1 · pii pii-v1
Full breach record for Centinel Financial Group, LLC →Centinel Financial Group LLC notified consumers of a security incident identified on April 29, 2024, involving unauthorized access to an advisor's email account via a suspicious email. The incident potentially exposed personal information including names, addresses, dates of birth, driver's license numbers, financial account numbers, and Social Security numbers. The company engaged Kroll for identity monitoring services.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_264d424921768957New Hampshire State AGfiled 2024-12-19(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-18-centinel-financial-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 18, 2024
- Raw hash
- ea383784a4dba0e5f139f0a492e9757673e8ce59a3dec3d656e0698ec75bbe2f
Reporting entity
- Name
- Centinel Financial Group, LLCnorm: centinel financial
Victim entity
- Name
- Centinel Financial Group, LLCnorm: centinel financial
Incident
- Discovered
- Apr 29, 2024
- Materiality determined
- —
- Notification sent
- Dec 18, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 33 weeks(233 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.