HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Vest LLC

bd_20e624fde6df999f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 29, 2025

To disclose

—

Affected

Not disclosed

Confidence

75%

Full breach record for Vest LLC →

Vest Tube, LLC experienced unauthorized access to a limited number of computer systems between February 14–15, 2025. An unknown actor gained access and exfiltrated certain files. Affected individuals' names and other PII may have been viewed or copied. Vest Tube engaged cybersecurity specialists, secured systems, notified federal law enforcement, and is offering 24 months of complimentary Experian credit monitoring and identity restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 14, 2025

Begins

Jul 29, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Vest LLC
norm: vest
Domain: vesttubellc.com

Name: Vest LLC
norm: vest
Domain: vesttubellc.com

Discovered: —
Breach occurred: Feb 14, 2025 – Feb 15, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Reported event to federal law enforcementFiled with California Office of the Attorney General

During the incident: Promptly took steps to secure our systems
Launched an investigation, with the assistance of cybersecurity specialists, to determine the full nature and scope of the event
Reported the event to federal law enforcement
Offering access to 24 months of complimentary credit monitoring and identity restoration services through Experian
Changes made: Worked quickly to secure our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-606270
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2025
Raw hash: 212b3e1a06cb204f3e1862416a76f191a681edff1eeef14097567da5cab1da82

Reporting entityVest LLC

Victim entityVest LLC

IncidentUnauthorized Access

Stated responsePromptly took steps to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov