HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Hillwood Estate Museum and Garden
bd_42f00e4a494e0031 · schema v1 · pii pii-v1
Full breach record for Hillwood Estate Museum and Garden →Hillwood Estate, Museum & Gardens notified consumers of a data breach where an unknown party accessed network portions between August 28 and September 17, 2023. The incident exposed names and government identifiers (SSN). The organization notified law enforcement and provided one year of free identity monitoring services via Kroll.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8946b43ad5873713New Hampshire State AGfiled 2023-12-26(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-21-hillwood-estate-museum-gardens-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- a8c840ee50c83f85f2131aba6472a629c8cf76b46f5ba87fff942ac3d5890b09
Reporting entity
- Name
- Hillwood Estate Museum and Gardennorm: hillwood estate museum and garden
- Domain
- hillwoodmuseum.org
Victim entity
- Name
- Hillwood Estate Museum and Gardennorm: hillwood estate museum and garden
- Domain
- hillwoodmuseum.org
Incident
- Discovered
- Sep 17, 2023
- Materiality determined
- —
- Notification sent
- Nov 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified law enforcement
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.