HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Lumitex, Inc.

bd_2a9bd4e3650e0fa0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 30, 2025

Filed

Aug 15, 2025

To disclose

16 days

Affected

Not disclosed

Linked

5 filings

Confidence

68%

Full breach record for Lumitex, Inc. →

Lumitex, Inc. notified consumers of a data breach discovered on July 30, 2025, involving unauthorized access to employee, shareholder, and vendor records. Impacted data included names, addresses, Social Security numbers, and government IDs. Lumitex engaged forensic specialists and law enforcement, and is offering 24 months of credit monitoring via Cyberscout/TransUnion. Notices were sent August 15, 2025.

J jump to incidentP pin to compareR raw source

Vermont clock✓ VT AG ≤14 bday16 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 16 days

Jul 30, 2025

Discovered

Aug 15, 2025

Filed

vs. sector median

9 wks faster

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_14422696b1f4a69a2025-08-15Verified
Massachusetts State AGbd_aabedb04a8a85a5b2025-08-15Verified
Maine State AGbd_ae34e3e38722f69f2025-08-15Candidate
Indiana State AGbd_f28766ad6a774dc72025-08-15Verified

Name: Lumitex, Inc.
norm: lumitex

Name: Lumitex, Inc.
norm: lumitex
Industry: Technologyllm

Discovered: Jul 30, 2025
Materiality determined: —
Notification sent: Aug 15, 2025
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified and cooperated with federal law enforcement
Initial access: valid_credentials

During the incident: Began an investigation into the scope and nature of the suspicious activity
Retained legal counsel and third-party forensic specialists to investigate the suspicious activity
Notified and cooperated with federal law enforcement
Changes made: Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: VT AG ≤14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGAug 15 · first

Massachusetts State AGAug 15 · first

Maine State AGAug 15 · first

Indiana State AGAug 15 · first

Vermont State AGAug 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-08-15-lumitex-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 15, 2025
Raw hash: da1572ab3009f834a15dab66465522d58dc80508f108c77a1d3bd358183026dd

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLumitex, Inc.

Victim entityLumitex, Inc.

Incidentdiscovered Jul 30, 2025

Stated responseBegan an investigation into the scope and nature of the suspicious activity

ComplianceVT AG ≤14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov