DisclosureLens
HackingTechnologyInformationVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)Financial accountHealth (basic)HighContained

Lumitex, Inc.

bd_2a9bd4e3650e0fa0 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 1, 2025

Filed

Aug 15, 2025

To disclose

11 weeks

Affected

12,500scope not determined

Linked

5 filings

Confidence

66%
Full breach record for Lumitex, Inc.

Lumitex, a technology company, disclosed a data breach affecting approximately 12,500 individuals in Vermont. The incident involved unauthorized access to a public-facing application, resulting in the exfiltration of customer data including names, Social Security numbers, driver's license numbers, and financial account information. Lumitex engaged Mandiant for forensic investigation, notified the FBI, reset credentials, and offered 12 months of credit monitoring. The breach was discovered in June 2025, with access occurring in May 2025.

Incident timeline

undetected · 31 days
discovery → filing · 11 weeks / 75 days

May 1, 2025

Begins

Jun 1, 2025

Discovered

Aug 15, 2025

Filed

vs. sector median

8 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
New Hampshire State AGAug 15 · first
Massachusetts State AGAug 15 · first
Maine State AGAug 15 · first
Indiana State AGAug 15 · first
Vermont State AGAug 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.