HackingData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
D'Youville Life and Wellness Community, Inc.
bd_1d7b8edbaf007685 · schema v1 · pii pii-v1
Full breach record for D'Youville Life and Wellness Community, Inc. →D’Youville Life and Wellness Community, Inc. notified consumers of a data breach where an unknown actor accessed its network between Oct 5-25, 2023, copying files. Affected data included names, SSNs, DOBs, and financial account numbers. The organization notified law enforcement, secured its network, and offered 12 months of credit monitoring via Equifax.
Vermont clock✗ VT AG >45 bday16 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_23743a0f6ac25439New Hampshire State AGfiled 2025-01-29Verified
- bd_ca10cf55575c7495Maryland State AGfiled 2025-01-29Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-29-dyouville-life-and-wellness-community-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 29, 2025
- Raw hash
- c8503c7fd134f7392dc418ac61443ee376fabbe8a1f875a4f904b3a25e322a2f
Reporting entity
- Name
- D'Youville Life and Wellness Community, Inc.norm: d youville life and wellness community
Victim entity
- Name
- D'Youville Life and Wellness Community, Inc.norm: d youville life and wellness community
Incident
- Discovered
- Oct 5, 2023
- Materiality determined
- Jan 28, 2025
- Notification sent
- Jan 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement and relevant regulatory authorities
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(482 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.