HackingData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Visit KC
bd_2f286201c5cc8712 · schema v1 · pii pii-v1
Full breach record for Visit KC →KC Installation, LLC (dba KCI Telecommunications) notified consumers of a data breach discovered on August 22, 2025. An unknown actor accessed network segments, copying and potentially viewing files containing names and government identifiers. KCI engaged cybersecurity specialists, reported to law enforcement, and enhanced security controls. Affected individuals are offered credit monitoring.
Vermont clock✗ VT AG >45 bday27 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-25-kc-installation-dba-kci-telecommunications-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 25, 2026
- Raw hash
- b77a4b6e0c4010709acb4ee77a5841812a2a01e32cc592bc40ea90106236753e
Reporting entity
- Name
- Visit KCnorm: visit kc
- Domain
- visitkc.com
Victim entity
- Name
- Visit KCnorm: visit kc
- Domain
- visitkc.com
Incident
- Discovered
- Aug 22, 2025
- Materiality determined
- —
- Notification sent
- Feb 25, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Reported the event to law enforcement
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.