HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Vitenas Cosmetic Surgery PA
bd_455b67c3da038b5c · schema v1 · pii pii-v1
Full breach record for Vitenas Cosmetic Surgery PA →Vitenas Cosmetic Surgery, PA notified Vermont AG of a data incident detected on Feb 26, 2025. An unauthorized third party infiltrated the network. Forensic investigation (concluded Mar 28, 2025) revealed potential exposure of names, DOBs, SSNs, driver's licenses, and health information. No identity theft reported. Credit monitoring offered via TransUnion.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_18b6b4e310db5d49Indiana State AGfiled 2025-04-08Verified
- bd_e7e594b3e0818a6bMaine State AGfiled 2025-04-11(3d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-08-vitenas-cosmetic-surgery-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2025
- Raw hash
- 73dc3e8eb499617f5e85a69b599fa56f2779e6585d4743160bf8b8b0fa72c628
Reporting entity
- Name
- Vitenas Cosmetic Surgery PAnorm: vitenas cosmetic surgery
Victim entity
- Name
- Vitenas Cosmetic Surgery PAnorm: vitenas cosmetic surgery
Incident
- Discovered
- Feb 26, 2025
- Materiality determined
- —
- Notification sent
- Apr 8, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.