Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Brumbaugh Wealth Management
bd_503c9110aaace2d4 · schema v1 · pii pii-v1
Full breach record for Brumbaugh Wealth Management →Brumbaugh Wealth Management notified consumers of a data breach involving unauthorized access to an employee's email account between July 3 and July 8, 2024. The incident exposed names, Social Security numbers, account numbers, and financial information. The company secured accounts, notified law enforcement, and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday23 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_12afc2ec3962ba6fIndiana State AGfiled 2025-01-13(34d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-10-brumbaugh-wealth-management-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 10, 2024
- Raw hash
- 24bc2d46fe593504c7f4ee045ef3bd6662d92624a133ca56318cc255390ccb35
Reporting entity
- Name
- Brumbaugh Wealth Managementnorm: brumbaugh wealth management
Victim entity
- Name
- Brumbaugh Wealth Managementnorm: brumbaugh wealth management
Incident
- Discovered
- Jul 3, 2024
- Materiality determined
- Nov 7, 2024
- Notification sent
- Nov 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
- Initial access
- phishing_link
Compliance
- Time to disclose
- 23 weeks(160 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.