HackingTargetedIDENTITY_BASICLowContained
American Humane Association
bd_2fa02522e1206a40 · schema v1 · pii pii-v1
Full breach record for American Humane Association →American Humane Association notified Vermont AG of a November 2022 cyber incident where an unknown actor gained unauthorized access to its network. The breach potentially exposed basic PII (names) of members. The organization engaged forensic investigators, notified law enforcement, and provided 12 months of identity monitoring via Kroll.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_49294fb6943d9827Maine State AGfiled 2023-03-23(6d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-17-american-humane-association-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2023
- Raw hash
- 835e339e9308d85bb4843943efcde0bece8916cc43a8b630265b790a0ccf50e1
Reporting entity
- Name
- American Humane Associationnorm: american humane
Victim entity
- Name
- American Humane Associationnorm: american humane
Incident
- Discovered
- Nov 16, 2022
- Materiality determined
- Feb 10, 2023
- Notification sent
- Mar 17, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.