HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Daniel H Cook Associates Inc.
bd_251c4ada515338e3 · schema v1 · pii pii-v1
Full breach record for Daniel H Cook Associates Inc. →Daniel H. Cook Associates, Inc. notified Vermont AG of a cybersecurity incident on Oct 17, 2025, involving unauthorized access to files containing names and credentials. No evidence of misuse was found. The company engaged cybersecurity experts and is offering 24 months of credit monitoring and identity protection services through IDX.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_040ee33be3453910New Hampshire State AGfiled 2026-01-20(10d gap)Verified
- bd_4940aed01302720fMaine State AGfiled 2026-01-17(13d gap)Verified
- bd_57b4bbcb437913d4Indiana State AGfiled 2026-01-16(14d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-30-daniel-h-cook-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2026
- Raw hash
- 11caaae0fa4dcdfab187863ce6bcc78064237e7a2136443c2ee012a720b7d7fd
Reporting entity
- Name
- Daniel H Cook Associates Inc.norm: daniel h cook associates
Victim entity
- Name
- Daniel H Cook Associates Inc.norm: daniel h cook associates
Incident
- Discovered
- Oct 17, 2025
- Materiality determined
- Jan 16, 2026
- Notification sent
- Jan 16, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(105 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.