HackingStolen CredentialsTargetedPIIIDENTITY_BASICLowContained
PDL Pratt Associates LLC
bd_25940b61997332ac · schema v1 · pii pii-v1
Full breach record for PDL Pratt Associates LLC →Pratt & Associates LLC, a tax and accounting firm, notified consumers of a data security incident. An unknown actor gained unauthorized access to an email account on July 29, 2025, potentially acquiring files containing personal information. The breach was contained, and an investigation with external experts was launched. The firm is offering complimentary credit monitoring and identity theft protection services through Epiq to affected individuals.
Vermont clock✗ VT AG >45 bday22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_44c6cef4cbb2eeb6Indiana State AGfiled 2025-12-30Verified
- bd_8af94f2c29f62a35Maine State AGfiled 2025-12-30Verified
- bd_d0d4d6ccda09c9d1New Hampshire State AGfiled 2025-12-30Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-30-pratt-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2025
- Raw hash
- 94ae372d4b31465a33712bb11e20bc12dd5f209ccc5fdf0a47e784cb9e7e31e9
Reporting entity
- Name
- PDL Pratt Associates LLCnorm: pdl pratt associates
Victim entity
- Name
- PDL Pratt Associates LLCnorm: pdl pratt associates
Incident
- Discovered
- Jul 30, 2025
- Materiality determined
- —
- Notification sent
- Dec 23, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(153 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.