HackingCustomer Data InvolvedIDENTITY_BASICPIILowContained
SMRT Architects & Engineering
bd_144dfaee22afe27f · schema v1 · pii pii-v1
Full breach record for SMRT Architects & Engineering →SMRT Architects and Engineers notified Vermont AG of a December 3, 2023 unauthorized access incident involving employment records containing names and TransUnion-inserted data elements. The company engaged forensic specialists and legal counsel, and offered 12 months of credit monitoring. No specific count of affected individuals was disclosed in the filing.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4b5c38c3f72cdc8fMaine State AGfiled 2024-04-15(7d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-22-smrt-architects-engineering-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 22, 2024
- Raw hash
- ebbd0fb48f81d46992e4adb56966d2560fc63dae6d5c958d247ec01e33a93c9c
Reporting entity
- Name
- SMRT Architects & Engineeringnorm: smrt architects engineering
Victim entity
- Name
- SMRT Architects & Engineeringnorm: smrt architects engineering
Incident
- Discovered
- Dec 3, 2023
- Materiality determined
- —
- Notification sent
- Apr 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(141 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.