HackingDelayed DiscoveryIDENTITY_BASICLowContained
Water For People
bd_1f8df32e54c704c8 · schema v1 · pii pii-v1
Full breach record for Water For People →Water For People notified consumers of unauthorized access to its computer systems discovered on December 15, 2023. The incident may have exposed names combined with other personal data. The organization engaged forensic investigators, secured its network, and offered complimentary credit monitoring via Equifax. No evidence of misuse was found.
Vermont clock✗ VT AG >45 bday38 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 265 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2f77e69a7542f2f8Montana State AGfiled 2024-09-05Candidate
- bd_328e5b2385a6a76dNew Hampshire State AGfiled 2024-09-05Verified
- bd_8937325be8132141Indiana State AGfiled 2024-09-05Verified
- bd_fcdf66f98c82eef3Washington State AGfiled 2024-09-05Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-09-05-water-people-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 5, 2024
- Raw hash
- 440691059492a57d3f2a6e4b9b688a56490df6db94713e4969e7e2c6092ddca3
Reporting entity
- Name
- Water For Peoplenorm: water for people
- Domain
- waterforpeople.org
Victim entity
- Name
- Water For Peoplenorm: water for people
- Domain
- waterforpeople.org
Incident
- Discovered
- Dec 15, 2023
- Materiality determined
- —
- Notification sent
- Sep 5, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 38 weeks(265 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.