AccidentalMisconfigurationCustomer Data InvolvedIDENTITY_BASICPIILowContained
Vermont Department of Labor
bd_2cf772fe62fba260 · schema v1 · pii pii-v1
Full breach record for Vermont Department of Labor →Vermont Department of Labor notified consumers that an unknown individual accessed documents uploaded via a website search function on or about August 9, 2023, due to a misconfiguration during a third-party vendor website upgrade. The incident exposed names and other personal data. The state discovered the issue on August 15, 2023, corrected the configuration, and offered one year of credit monitoring and identity theft protection services.
Vermont clock⏱ VT AG >14 bday29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-13-vermont-department-labor-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 13, 2023
- Raw hash
- 2ed4629d126d29507fbe28f993c6dba46a0981f75ca8379dee7dc893a960fa90
Reporting entity
- Name
- Vermont Department of Labornorm: vermont department of labor
Victim entity
- Name
- Vermont Department of Labornorm: vermont department of labor
Incident
- Discovered
- Aug 15, 2023
- Materiality determined
- Sep 13, 2023
- Notification sent
- Sep 13, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.