HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Lamont Hanley & Associates, Inc.
bd_24c2133d951ad207 · schema v1 · pii pii-v1
Full breach record for Lamont Hanley & Associates, Inc. →Lamont Hanley & Associates, Inc. notified consumers of a security incident discovered on June 20, 2023, involving unauthorized access to an employee email account. The investigation determined that names, Social Security Numbers, and dates of birth were present in the compromised account. The company engaged forensic investigators, secured the environment, and offered 12 months of credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday45 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1a20215b051b1273Maine State AGfiled 2024-05-02Candidate
- bd_77054ce4692c7116Indiana State AGfiled 2024-05-02Verified
- bd_f33730bbb5f41a14Montana State AGfiled 2024-05-02Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-02-lamont-hanley-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2024
- Raw hash
- a0253419b98de0e426e40649e44f6d0d02a8044f66ff2f852ec6affca5abb0e9
Reporting entity
- Name
- Lamont Hanley & Associates, Inc.norm: lamont hanley associates
Victim entity
- Name
- Lamont Hanley & Associates, Inc.norm: lamont hanley associates
Incident
- Discovered
- Jun 20, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 45 weeks(317 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.