HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Curium Pharma
bd_1fa2254eb35fcc7f · schema v1 · pii pii-v1
Full breach record for Curium Pharma →Curium Pharma notified Vermont AG of a security incident occurring Oct 15-19, 2024, discovered Oct 17, 2024. Unauthorized access compromised names and government IDs. The company engaged forensic investigators, secured the network, and offered Equifax credit monitoring. Incident status is contained.
Vermont clock✗ VT AG >45 bday35 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_763c5cbdac35c6dbIndiana State AGfiled 2025-06-20Verified
- bd_4e307d5002b336a2Maine State AGfiled 2025-06-24(4d gap)Verified
- bd_e7a285303c3ab54dNew Hampshire State AGfiled 2025-06-24(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-20-curium-pharma-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 20, 2025
- Raw hash
- 4bb9d59a15054a7a680e489a9fb7f057687489e6e31d30b8d47ad3cd888a1703
Reporting entity
- Name
- Curium Pharmanorm: curium pharma
- Domain
- dara-pharma.com
Victim entity
- Name
- Curium Pharmanorm: curium pharma
- Domain
- dara-pharma.com
Incident
- Discovered
- Oct 17, 2024
- Materiality determined
- Apr 15, 2025
- Notification sent
- Jun 20, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(246 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.