MalwareRansomwareRansom DemandedData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
VINCENT LIGHTING SYSTEMS COMPANY
bd_2b12bb9c0b7385ee · schema v1 · pii pii-v1
Full breach record for VINCENT LIGHTING SYSTEMS COMPANY →Vincent Lighting Systems experienced a ransomware incident on Feb 13, 2023. An unauthorized user encrypted servers and workstations and demanded payment. The FBI was notified. The company disconnected its network and did not pay the ransom. Personal information potentially accessed includes names, SSNs, driver's license numbers, and credit/debit card numbers. Affected individuals were offered 24 months of identity theft protection services.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_00ab2fd073d8560dNew Hampshire State AGfiled 2023-04-27(28d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-30-vincent-lighting-systems-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 30, 2023
- Raw hash
- 00c46e6e447bbb463cd5f48b5ed0551bbeefd3624aa6c0f4e4d8a6a197f48065
Reporting entity
- Name
- VINCENT LIGHTING SYSTEMS COMPANYnorm: vincent lighting
Victim entity
- Name
- VINCENT LIGHTING SYSTEMS COMPANYnorm: vincent lighting
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Mar 30, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Informed the FBI of what occurred
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.