HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTCREDENTIALSFINANCIALMediumContained
Orchid Island Golf and Beach Club
bd_40a24cd1ffdc8bec · schema v1 · pii pii-v1
Full breach record for Orchid Island Golf and Beach Club →Orchid Island Golf and Beach Club notified consumers of a data breach detected on August 14, 2025. An unauthorized third party accessed the network and exfiltrated files containing names, partial SSNs, i-Enroller credentials, and health insurance info. The club engaged forensic specialists, notified law enforcement, and offered 12 months of TransUnion credit monitoring.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 32 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8884b2951577d400Maine State AGfiled 2025-09-15Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-15-orchid-island-golf-and-beach-club-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2025
- Raw hash
- 845b3a03820b645dd464080235e5552f4a323b47a37112b10cac8e58185175f9
Reporting entity
- Name
- Orchid Island Golf and Beach Clubnorm: orchid island golf and beach club
- Domain
- orchidislandfl.com
Victim entity
- Name
- Orchid Island Golf and Beach Clubnorm: orchid island golf and beach club
- Domain
- orchidislandfl.com
Incident
- Discovered
- Aug 14, 2025
- Materiality determined
- —
- Notification sent
- Sep 15, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTCREDENTIALSFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- VT AG >14 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.