MalwareManufacturingManufacturingRansomwareRansom DemandedData EncryptedIdentity (basic)Government IDFinancial accountMediumContained

VINCENT LIGHTING SYSTEMS COMPANY

bd_2b12bb9c0b7385ee · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2023

Filed

Mar 30, 2023

To disclose

6 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

67%

Full breach record for VINCENT LIGHTING SYSTEMS COMPANY →

Vincent Lighting Systems experienced a ransomware incident on Feb 13, 2023. An unauthorized user encrypted servers and workstations and demanded payment. The FBI was notified. The company disconnected its network and did not pay the ransom. Personal information potentially accessed includes names, SSNs, driver's license numbers, and credit/debit card numbers. Affected individuals were offered 24 months of identity theft protection services.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 6 weeks / 45 days

Feb 13, 2023

Discovered

Mar 30, 2023

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_bb67236e7415381a2023-04-04 · +5dVerified
New Hampshire State AGbd_00ab2fd073d8560d2023-04-27 · +28dVerified

Name: VINCENT LIGHTING SYSTEMS COMPANY
norm: vincent lighting

Name: VINCENT LIGHTING SYSTEMS COMPANY
norm: vincent lighting
Industry: Manufacturingllm

Discovered: Feb 13, 2023
Materiality determined: —
Notification sent: Mar 30, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Informed the FBI of what occurred
Initial access: valid_credentials

During the incident: Disconnected internal network from outside access
Contacted the Federal Bureau of Investigation and informed the FBI of what occurred
Offering at no cost to you, identity theft protection services through IDX, a ZeroFox Company
Doing additional training with our employees concerning data security
Changes made: Continuing work on installing additional security measures within our systems
Doing additional training with our employees concerning data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGMar 30 · first · this page

Indiana State AG+5d

New Hampshire State AG+28d

Pattern: first filing Mar 30 (VT), last Apr 27 (NH) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-03-30-vincent-lighting-systems-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2023
Raw hash: 00c46e6e447bbb463cd5f48b5ed0551bbeefd3624aa6c0f4e4d8a6a197f48065

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityVINCENT LIGHTING SYSTEMS COMPANY

Victim entityVINCENT LIGHTING SYSTEMS COMPANY

Incidentdiscovered Feb 13, 2023

Stated responseDisconnected internal network from outside access

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov