Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
OsteoRemedies, LLC
bd_2d174c2c04794efe · schema v1 · pii pii-v1
Full breach record for OsteoRemedies, LLC →OsteoRemedies, LLC notified consumers of a phishing incident targeting employees in June-August 2022. Unauthorized access to email accounts resulted in exposure of names and Social Security numbers. The company secured accounts, investigated, and offered one year of Experian IdentityWorks credit monitoring.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-09-osteoremedies-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2023
- Raw hash
- 74ef49f556b9e74a08f908c8aa5de7eb9e683d9bb6a1cdf04658058dc235c9c3
Reporting entity
- Name
- OsteoRemedies, LLCnorm: osteoremedies
Victim entity
- Name
- OsteoRemedies, LLCnorm: osteoremedies
Incident
- Discovered
- Mar 29, 2023
- Materiality determined
- —
- Notification sent
- May 9, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.