Social EngineeringOtherPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)CredentialsLowContained

YMCA of Greater Hartford

bd_3a63bf365c60e251 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 8, 2023

Filed

Sep 27, 2023

To disclose

7 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for YMCA of Greater Hartford →

YMCA of Greater Hartford notified individuals of a data breach involving a compromised employee email account. Unauthorized access occurred between July 27 and August 8, 2023, following suspicious activity detected on August 8. The incident involved phishing leading to credential compromise. Affected data included names and other personal information. The organization reset credentials, investigated the incident, and offered 24 months of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 12 days

discovery → filing · 7 weeks / 50 days

Jul 27, 2023

Begins

Aug 8, 2023

Discovered

Sep 27, 2023

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: YMCA of Metropolitan Hartford
norm: ymca of metropolitan hartford

Name: YMCA of Greater Hartford
norm: ymca of greater hartford
Domain: ghymca.org
Industry: Otherllm

Discovered: Aug 8, 2023
Breach occurred: Jul 27, 2023 – Aug 8, 2023
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 26, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Shut down access to the account
Reset the password
Commenced an investigation into the nature and scope of the incident
Conducted a thorough review of the contents of the account
Offering a complimentary twenty-four (24) months of access to Experian IdentityWorks
Changes made: Continue to utilize multifactor authentication protection on the account
Continue to review our policies and procedures for ways to enhance the existing protections we have in place
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-09-27-ymca-metropolitan-hartford-data-breach-notice-consumerspdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2023
Raw hash: 9a86c8d634411a56192d6470e2f62947875bc425f32fa6891ef8153dde2c3cad

Reporting entityYMCA of Metropolitan Hartford

Victim entityYMCA of Greater Hartford

Incidentdiscovered Aug 8, 2023

Stated responseShut down access to the account

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov