HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
CLEAResult
bd_440b9a6a6698327c · schema v1 · pii pii-v1
Full breach record for CLEAResult →CLEAResult, an energy efficiency program administrator, disclosed a data breach involving the MOVEit Transfer software provided by Progress Software. An unauthorized actor accessed and exfiltrated files containing personal information (names, addresses, SSNs, financial data) on or about May 30, 2023. CLEAResult notified affected individuals on August 23, 2023, offering 24 months of credit monitoring. The investigation into the full scope of affected individuals is ongoing.
Leak gap clock⏱ Leak >30d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by cl0p about this victim predates this filing by 42 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-23-clearesult-consulting-progress-software-moveit-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- 48e6346a4dd9d00871a0ea3e2da9ddddad67c071b4f26dfcb640d3e51be16064
Reporting entity
- Name
- CLEAResultnorm: clearesult
- Domain
- clearesult.com
Victim entity
- Name
- CLEAResultnorm: clearesult
- Domain
- clearesult.com
Incident
- Discovered
- Aug 4, 2023
- Materiality determined
- Aug 4, 2023
- Notification sent
- Aug 23, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this incident to federal law enforcement
- Third party
- via Progress Software Corporation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- Leak >30dVT AG ≤14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.