HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
REIC Rentals
bd_3a2a04c5f7d82571 · schema v1 · pii pii-v1
Full breach record for REIC Rentals →REIC Rentals, LLC reported unauthorized access to its network between Feb 3-5, 2026. The incident impacted one Vermont resident, exposing names and Social Security numbers. REIC notified law enforcement, regulators, and credit bureaus, and offered 12 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_3f2d05e3fc670352New Hampshire State AGfiled 2026-04-07Verified
- bd_7a55f671629a4ab5Indiana State AGfiled 2026-04-07Candidate
- bd_d63beaa2c7193671Maine State AGfiled 2026-04-07Verified
- bd_e8755c346650d4efIndiana State AGfiled 2026-04-07Candidate
Show 1 more filing ↓Show fewer ↑up to 41d gap
- bd_3e1c8fb7f249e001Oregon State AGfiled 2026-05-18(41d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-04-07-reic-rentals-llc-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 7, 2026
- Raw hash
- e0d56ecb5fb9b30d11749d9b2e71c1b43773c9c356d5c7cc7ecbea7eccb9813c
Reporting entity
- Name
- REIC Rentalsnorm: reic rentals
- Domain
- reic.com
Victim entity
- Name
- REIC Rentalsnorm: reic rentals
- Domain
- reic.com
Incident
- Discovered
- Feb 3, 2026
- Materiality determined
- Apr 7, 2026
- Notification sent
- Apr 7, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified relevant regulatory authoritiesProviding written notice to relevant state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.