HackingFinancial ServicesFinanceData ExfiltratedGovernment IDFinancial accountMediumContained

Redbrick LMD`

bd_3104db3bbd2696a8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 29, 2024

Filed

Apr 25, 2025

To disclose

39 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Redbrick LMD` →

Redbrick LMD LLC reported a cybersecurity incident detected on July 29, 2024, involving unauthorized access to its network and exfiltration of files. The breach compromised Social Security Numbers and Account Numbers. Redbrick engaged outside cybersecurity professionals, secured its network, and is offering 12 months of identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday39 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 39 weeks / 270 days

Jul 29, 2024

Discovered

Mar 7, 2025

Scope determined

Apr 25, 2025

Filed

vs. sector median

+30 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_184da0c8e74159072025-04-25Candidate
Indiana State AGbd_b1ac8bfdc4ed6b912025-04-25Verified
New Hampshire State AGbd_450bfaa50cc147382025-05-05 · +10dVerified
Maine State AGbd_bd18144fb0738bb82025-05-08 · +13dVerified

Show 1 more filing ↓up to 14d gap

Massachusetts State AGbd_7daa736bcb8dc4952025-05-09 · +14dVerified

Name: Redbrick LMD`
norm: redbrick lmd

Name: Redbrick LMD`
norm: redbrick lmd
Industry: Financial Servicesllm

Discovered: Jul 29, 2024
Materiality determined: Mar 7, 2025
Notification sent: Apr 24, 2025
Affected individuals: Not disclosed
Data types: Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Filed notice with the Office of the Vermont Attorney General

During the incident: Secured our network
Launched an investigation in consultation with outside cybersecurity professionals
Offering identity theft protection services through IDX
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(270 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGApr 25 · first

Indiana State AGApr 25 · first

Vermont State AGApr 25 · first · this page

New Hampshire State AG+10d

Maine State AG+13d

Massachusetts State AG+14d

Pattern: first filing Apr 25 (NE), last May 9 (MA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-04-25-redbrick-lmd-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2025
Raw hash: 32ee36af2ff49d28095e391b8c56fba590101018e846376b31c7c74a3ad4e86a

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityRedbrick LMD`

Victim entityRedbrick LMD`

Incidentdiscovered Jul 29, 2024

Stated responseSecured our network

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov