MalwareRansomwareData ExfiltratedData EncryptedIDENTITY_BASICMediumContained
Hardin, Kundla, McKeon, & Poletto
bd_3384163120222ac2 · schema v1 · pii pii-v1
Full breach record for Hardin, Kundla, McKeon, & Poletto →Hardin, Kundla, McKeon & Poletto, P.C. notified consumers of a data security incident involving a malicious encryption attack in January 2024. The incident resulted in unauthorized copying of files containing names and Social Security numbers. Approximately 12,063 individuals were notified. The firm engaged cybersecurity experts and is offering complimentary identity protection services.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_61268bce7bc619bcIndiana State AGfiled 2025-05-29Verified
- bd_9b170ee085413783Maine State AGfiled 2025-05-29Candidate
- bd_e88fc6018d962b26New Hampshire State AGfiled 2025-05-29Verified
- bd_063a3404d03530c3Texas State AGfiled 2025-05-30(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-29-hardin-kundla-mckeon-poletto-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2025
- Raw hash
- 5696563c35b9df01e516667f59f6bacc24b902333cfd2d370407d4244234f7cc
Reporting entity
- Name
- Hardin, Kundla, McKeon, & Polettonorm: hardin kundla mckeon poletto
Victim entity
- Name
- Hardin, Kundla, McKeon, & Polettonorm: hardin kundla mckeon poletto
Incident
- Discovered
- Mar 31, 2025
- Materiality determined
- May 29, 2025
- Notification sent
- May 29, 2025
- Affected individuals
- 12,063
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.