HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
AlohaCare
bd_35d7cd006030565a · schema v1 · pii pii-v1
Full breach record for AlohaCare →AlohaCare notified Vermont consumers of a data breach involving unauthorized access to member information. Compromised data included names, Social Security numbers, and financial account numbers. The company offered free credit monitoring services via Identity Force. The incident is contained.
Leak gap clock⏱ Leak >90d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 4 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 100 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_267bf6a743ba7a14Leak Sitecl0pfiled 2023-07-26(100d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_51b508a9a3d16f90Hawaii State AGfiled 2023-11-03Verified
- bd_5def3fef6b1cfeb3California State AGfiled 2023-11-03Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-03-alohacare-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 3, 2023
- Raw hash
- afb95c6339f709bf507ace7b7d724ad0ecdc5876104c040563567e49f1024f63
Reporting entity
- Name
- AlohaCarenorm: alohacare
- Domain
- alohacare.org
Victim entity
- Name
- AlohaCarenorm: alohacare
- Domain
- alohacare.org
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Nov 3, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Compliance flags
- Leak >90d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.