HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)LowContained

Vi Living

bd_2e0675b06772d3d1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 13, 2023

Filed

Dec 21, 2023

To disclose

40 weeks

Affected

Not disclosed

Confidence

67%

Full breach record for Vi Living →

Classic Residence Management Limited Partnership dba Vi Living disclosed a March 2023 data breach where an unauthorized third party accessed its corporate network. The incident exposed basic PII (names) of residents. Vi Living took networks offline, engaged forensic experts, reported to law enforcement, and offered one year of Experian credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday40 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 40 weeks / 283 days

Mar 13, 2023

Discovered

Dec 21, 2023

Filed

vs. sector median

+29 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Classic Residence Management
norm: classic residence management

Name: Vi Living
norm: vi living
Industry: Healthcarellm

Discovered: Mar 13, 2023
Materiality determined: —
Notification sent: Dec 21, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported the incident to law enforcement
Initial access: exploit_public_facing

During the incident: Took each of Vi Senior Living’s community-based IT networks offline
Reported the incident to law enforcement and cooperated with their separate investigation
Engaged several leading IT forensic experts and IT remediation firms
Offering a complimentary one-year membership of Experian IdentityWorks Credit Plus 3B
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 40 weeks(283 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-12-21-classic-residence-management-limited-partnership-dba-vi-living-data-breach-notice
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2023
Raw hash: f2105f129abab17643470978274c1eea5712e6a0f642ad46e27b5bca8d43103e

Reporting entityClassic Residence Management

Victim entityVi Living

Incidentdiscovered Mar 13, 2023

Stated responseTook each of Vi Senior Living’s community-based IT networks offline

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov