HackingStolen CredentialsTargetedIDENTITY_BASICCREDENTIALSLowContained
Drug Free Workplaces
bd_4a8f74a43edb3b0d · schema v1 · pii pii-v1
Full breach record for Drug Free Workplaces →Drug Free Workplaces USA notified Vermont AG that unauthorized access to two employee email accounts occurred between March 29 and May 4, 2023. The incident compromised names and credentials for approximately 4 Vermont residents. The company engaged outside cybersecurity professionals and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7c980389ee4fad0aCalifornia State AGfiled 2023-10-27(1d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-10-26-drug-free-workplaces-usa-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 26, 2023
- Raw hash
- c9f7b784da6692db8da7116492cc291002055427eceafebeb7304819c2bb5617
Reporting entity
- Name
- Drug Free Workplacesnorm: drug free workplaces
- Domain
- drugfreeworkplaces.com
Victim entity
- Name
- Drug Free Workplacesnorm: drug free workplaces
- Domain
- drugfreeworkplaces.com
Incident
- Discovered
- May 4, 2023
- Materiality determined
- Oct 26, 2023
- Notification sent
- Oct 26, 2023
- Affected individuals
- 4
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(175 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.