MalwareRansomwareData EncryptedTargetedIDENTITY_BASICLowContained
LORING WOLCOTT & COOLIDGE TRUST, LLC
bd_1afb00582d5baf31 · schema v1 · pii pii-v1
Full breach record for LORING WOLCOTT & COOLIDGE TRUST, LLC →Loring, Wolcott & Coolidge notified consumers of a security incident occurring between April 26 and May 12, 2024. Unauthorized activity impacted systems with malware, resulting in unauthorized access to personal information including names and variable data. The firm engaged third-party forensic specialists, contained the incident, and is offering three years of complimentary credit monitoring and identity restoration services to affected individuals.
Vermont clock✗ VT AG >45 bday23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_10199ff90567cd4bMontana State AGfiled 2024-10-17Candidate
- bd_5c28e11f10055eceMaine State AGfiled 2024-10-17Verified by operator
- bd_76f8e982ebbd38b9Indiana State AGfiled 2024-10-17Verified
- bd_93785b1c38b74805New Hampshire State AGfiled 2024-10-17Verified
Show 1 more filing ↓Show fewer ↑
- bd_b7f361d99c37a64cCalifornia State AGfiled 2024-10-17Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-17-loring-wolcott-coolidge-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 17, 2024
- Raw hash
- 43c75c0172b0e1af5156fceb8c9f3c397185dd1db0e6d97ddf3c0bf7bb72e602
Reporting entity
- Name
- LORING WOLCOTT & COOLIDGE TRUST, LLCnorm: loring wolcott coolidge
Victim entity
- Name
- LORING WOLCOTT & COOLIDGE TRUST, LLCnorm: loring wolcott coolidge
Incident
- Discovered
- May 12, 2024
- Materiality determined
- Oct 17, 2024
- Notification sent
- Oct 17, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified and consulted with law enforcement throughout the course of the Incident
Compliance
- Time to disclose
- 23 weeks(158 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.