Social EngineeringPhishingStolen CredentialsEmployee Data InvolvedPIIIDENTITY_BASICCREDENTIALSLowActive
McCracken Financial Solutions
bd_417f911b99c584c5 · schema v1 · pii pii-v1
Full breach record for McCracken Financial Solutions →McCracken Financial Solutions Corp. notified employees and dependents that an unknown actor accessed an HR employee's Outlook account on May 1, 2023, for 3.5 hours. The incident involved potential exposure of PII and credentials. The company is reviewing policies and offering two years of credit monitoring via NortonLifeLock.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-14-mccracken-financial-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 14, 2023
- Raw hash
- 1ae9ed2e24cd247e3d98876a13eadeee3f63bc304f01bd6bf21d5b7536a17c35
Reporting entity
- Name
- McCracken Financial Solutionsnorm: mccracken financial
- Domain
- mccrackenfs.com
Victim entity
- Name
- McCracken Financial Solutionsnorm: mccracken financial
- Domain
- mccrackenfs.com
Incident
- Discovered
- May 1, 2023
- Materiality determined
- —
- Notification sent
- Jun 14, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.