HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
Archie Cochrane Ford
bd_3d62f163b77d55cc · schema v1 · pii pii-v1
Full breach record for Archie Cochrane Ford →Archie Cochrane Motors notified Vermont AG of a December 2024 incident where an unauthorized third party attempted to access its network. Personal information including names, addresses, and SSNs may have been exposed. The investigation is ongoing. The company engaged forensic experts, notified the FBI, and is offering 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by akira about this victim predates this filing by 78 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-27-archie-cochrane-motors-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2025
- Raw hash
- b69b0cc18ea4a5e5f25a4e4428e2a843316ee25510b572d79ce42e3c69584579
Reporting entity
- Name
- Archie Cochrane Fordnorm: archie cochrane ford
- Domain
- billingsford.com
Victim entity
- Name
- Archie Cochrane Fordnorm: archie cochrane ford
- Domain
- billingsford.com
Incident
- Discovered
- Dec 11, 2024
- Materiality determined
- Feb 27, 2025
- Notification sent
- Feb 27, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the FBI and other relevant law enforcement agenciesNotified Equifax, Experian and Transunion
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(78 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.