HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Champlain Valley Office of Economic Opportunity

bd_4e998d7cbeed5f92 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 28, 2025

To disclose

—

Affected

Not disclosed

Confidence

67%

Full breach record for Champlain Valley Office of Economic Opportunity →

Champlain Valley Office of Economic Opportunity (CVOEO) notified consumers that a single employee email account was accessed without authorization between March 7 and March 14, 2025. The unauthorized access involved an unknown actor. CVOEO engaged third-party forensic specialists, secured the account, and reviewed emails to identify affected individuals. Personal information was present in the relevant emails. CVOEO is reviewing security policies and implementing additional cybersecurity measures.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 7, 2025

Begins

May 28, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Champlain Valley Office of Economic Opportunity
norm: champlain valley office of economic opportunity

Name: Champlain Valley Office of Economic Opportunity
norm: champlain valley office of economic opportunity
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Mar 7, 2025 – Mar 14, 2025
Materiality determined: —
Notification sent: May 28, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Secured the email account
Confirmed the security of our email environment
Conducted a comprehensive investigation with the assistance of third-party forensic specialists
Reviewed the relevant emails to determine the type of information contained therein
Notifying potentially impacted individuals
Reviewing our existing security policies
Changes made: Implement appropriate cybersecurity measures to prevent a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-05-28-champlain-valley-office-economic-opportunity-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2025
Raw hash: 662fd18bf7892748b643335dd183f554bbf6df4d7e4f37af70bce6b61d4f42b7

Reporting entityChamplain Valley Office of Economic Opportunity

Victim entityChamplain Valley Office of Economic Opportunity

IncidentUnauthorized Access

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov