Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
R.V.I. Holdings, LLC
bd_3939531583e0e199 · schema v1 · pii pii-v1
Full breach record for R.V.I. Holdings, LLC →R.V.I. Holdings, LLC notified consumers of a security event where an unauthorized individual accessed an employee email account between August 23 and August 30, 2022. The compromised account contained customers' full names. The company engaged outside cybersecurity professionals for investigation and offered one year of complimentary Equifax Credit Watch Gold monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday34 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-04-18-rvi-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2023
- Raw hash
- 92111deb99450aa906aba55a00c70db2fafedab49e77497dd19dbc765c9f7dd8
Reporting entity
- Name
- R.V.I. Holdings, LLCnorm: rvi holdings
Victim entity
- Name
- R.V.I. Holdings, LLCnorm: rvi holdings
Incident
- Discovered
- Aug 23, 2022
- Materiality determined
- —
- Notification sent
- Apr 18, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.