HackingStolen CredentialsData ExfiltratedIDENTITY_BASICLowContained
Massachusetts Development Finance Agency
bd_2ea51016ae29126f · schema v1 · pii pii-v1
Full breach record for Massachusetts Development Finance Agency →Massachusetts Development Finance Agency notified consumers of unauthorized network access between June 17 and November 28, 2024. The incident involved unauthorized viewing and copying of files containing names. MassDevelopment notified federal law enforcement and is offering 24 months of free credit monitoring and identity restoration services.
Vermont clock✗ VT AG >45 bday37 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_34671322dd28ba88Maryland State AGfiled 2025-02-28Candidate
- bd_66b7f9e9aadbbed2Maine State AGfiled 2025-02-28Candidate
- bd_870d69b2c9daed6bNew Hampshire State AGfiled 2025-02-28Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-28-massachusetts-development-finance-agency-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 15fa8686ce24063a16d258d7ca4eac025824b6cdb4f741c495025b67800b4d07
Reporting entity
- Name
- Massachusetts Development Finance Agencynorm: massachusetts development finance agency
Victim entity
- Name
- Massachusetts Development Finance Agencynorm: massachusetts development finance agency
Incident
- Discovered
- Jun 17, 2024
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 37 weeks(256 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.