HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Pawling Corporation
bd_409644e15932f592 · schema v1 · pii pii-v1
Full breach record for Pawling Corporation →Pawling Corporation notified consumers of a data breach involving unauthorized access to personal information, including names, addresses, Social Security numbers, and financial account details. The company is offering 90 days of credit monitoring and fraud assistance via TransUnion/Cyberscout. The incident is reported to the Vermont Attorney General.
Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by akira about this victim predates this filing by 83 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-17-pawling-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 17, 2025
- Raw hash
- 667b413f408648ad0e504b7c564c89f895207f7512774abbc2eb9e310d867857
Reporting entity
- Name
- Pawling Corporationnorm: pawling
- Domain
- pawling.com
Victim entity
- Name
- Pawling Corporationnorm: pawling
- Domain
- pawling.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Dec 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Compliance flags
- Leak >30d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.