Enviro Arbor Solutions
bd_428ce2d7a47c8470 · schema v1 · pii pii-v1
Full breach record for Enviro Arbor Solutions →Enviro Arbor Solutions (EAS) notified Maryland residents of a cybersecurity incident discovered on April 9, 2024, involving unauthorized access to EAS email accounts. The breach exposed personal data including names, birth dates, driver's license/government IDs, financial account and routing numbers, health insurance details, biometric information, clinical/treatment info, medical record numbers, passport numbers, usernames, passwords, and Social Security numbers. EAS secured the email environment, engaged forensic experts, enhanced security protocols, and offered complimentary credit monitoring and fraud assistance via Cyberscout/TransUnion.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d9fcde30ac347f67New Hampshire State AGfiled 2025-01-15(302d gap)Verified
- bd_a02f335d3bd450f6Maine State AGfiled 2025-01-14(303d gap)Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376194.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- d5828f66a03e903ad6cbcfecd5fa0bae9a925ff8135616ba264b87055ea1c362
Reporting entity
- Name
- Enviro Arbor Solutionsnorm: enviro arbor
Victim entity
- Name
- Enviro Arbor Solutionsnorm: enviro arbor
Incident
- Discovered
- Apr 9, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICAUTHENTICATIONBIOMETRIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed Security Breach Notification with Maryland Office of the Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 months(583 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.