HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Powerhouse Retail Services
bd_512c8d67b1e6aac0 · schema v1 · pii pii-v1
Full breach record for Powerhouse Retail Services →Powerhouse Retail Services notified consumers of a data breach where an unauthorized individual accessed its network, potentially viewing personal data including names and government IDs. The incident occurred around September 20, 2023, and was discovered on January 22, 2026. The company engaged external cybersecurity professionals and is offering credit monitoring services. At least 9 Rhode Island residents were confirmed affected.
Vermont clock✓ VT AG ≤14 bday12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_3dfe3ea201afe4b2Maine State AGfiled 2026-02-03Candidate
- bd_3f4af44caafcf9aeIndiana State AGfiled 2026-02-03Verified
- bd_485a778092cf2ccaTexas State AGfiled 2026-02-04(1d gap)Verified
- bd_26e229a4b8303badNew Hampshire State AGfiled 2026-02-09(6d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-03-powerhouse-retail-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2026
- Raw hash
- 0aee754d6d6817a87a3537816bb2c5d261cabc54212eb211988ca7b3586987db
Reporting entity
- Name
- Powerhouse Retail Servicesnorm: powerhouse retail
- Domain
- powerhousenow.com
Victim entity
- Name
- Powerhouse Retail Servicesnorm: powerhouse retail
- Domain
- powerhousenow.com
Incident
- Discovered
- Jan 22, 2026
- Materiality determined
- —
- Notification sent
- Feb 3, 2026
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.