HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedIdentity (basic)LowContained

Peregrine Group, LLC

bd_2bf6e76b3231084d · schema v1 · pii pii-v1

Severity

Low

Discovered

May 4, 2024

Filed

Jul 12, 2024

To disclose

10 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for Peregrine Group, LLC →2 incidents on file

Peregrine Group, LLC notified consumers of unauthorized access to its network between May 1-3, 2024. Files containing names were copied without permission. The company engaged in a comprehensive review, established a dedicated assistance line, and offered complimentary identity monitoring services. The incident is contained.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 3 days

discovery → filing · 10 weeks / 69 days

May 1, 2024

Begins

May 4, 2024

Discovered

Jul 12, 2024

Filed

vs. sector median

9 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_03c5a96dffaa73642024-06-25 · +17dVerified by operator

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_0ccf98300af4bea12024-07-12Candidate
Indiana State AGbd_236adb5c8eddd2992024-07-12Verified
New Hampshire State AGbd_38c40952dbd3640b2024-07-12Verified
Maine State AGbd_e417edc9cec5ec9f2024-07-12Verified

Show 1 more filing ↓

Massachusetts State AGbd_fd3a36a402fd20592024-07-12Verified

Name: Peregrine Group, LLC
norm: peregrine group
Domain: peregrinegp.com

Name: Peregrine Group, LLC
norm: peregrine group
Domain: peregrinegp.com
Industry: Professional Servicesllm

Discovered: May 4, 2024
Breach occurred: May 1, 2024 – May 3, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 12, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Undertook efforts to confirm the security of our network and determine what occurred
Conducted a comprehensive review to determine the contents, to whom the contents related, and to identify contact information for those individuals
Notifying individuals about this matter and providing guidance about free resources
Offering complimentary identity monitoring services
Established a toll-free dedicated assistance line
Changes made: Continue to evaluate our policies, procedures, and technical security measures to reduce the likelihood of similar events occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGJul 12 · first

Indiana State AGJul 12 · first

New Hampshire State AGJul 12 · first

Maine State AGJul 12 · first

Massachusetts State AGJul 12 · first

Vermont State AGJul 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-07-12-peregrine-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 12, 2024
Raw hash: fbeeecceba96c38e9c80d38e6e6f79e6a4417a5ad3bb7e5806b3056c00ed00ad

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityPeregrine Group, LLC

Victim entityPeregrine Group, LLC

Incidentdiscovered May 4, 2024

Stated responseUndertook efforts to confirm the security of our network and determine what occurred

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov