Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
WORLD LEARNING INC.
bd_4f21bc708190f1f7 · schema v1 · pii pii-v1
Full breach record for WORLD LEARNING INC. →World Learning Inc. notified consumers of a data breach where an unknown actor gained unauthorized access to an employee's email account from April 6, 2023 to June 1, 2023 via phishing. The incident exposed names and passport images. World Learning secured the account and offered 12 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by lockbit_3 about this victim predates this filing by 35 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-07-12-world-learning-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- 6a546392236e0f70bf3c017827f3b159ed1a3d08f3f8abf9d503ca697b26761d
Reporting entity
- Name
- WORLD LEARNING INC.norm: world learning
- Domain
- worldlearning.org
Victim entity
- Name
- WORLD LEARNING INC.norm: world learning
- Domain
- worldlearning.org
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- Jul 12, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- VT AG >14 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.