HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICPIILowContained
Elephant Insurance Services, LLC
bd_514f11df42d9cb55 · schema v1 · pii pii-v1
Full breach record for Elephant Insurance Services, LLC →Elephant Insurance Services, LLC notified consumers of a data breach where unauthorized access to employee email accounts occurred between September 2021 and March 2022. The incident was discovered in April 2022. The breach compromised names and addresses. The company reported the incident to federal law enforcement, secured systems, and offered 12 months of identity monitoring services.
Vermont clock✗ VT AG >45 bday41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a2b9e4be35baa690Delaware State AGfiled 2023-01-13Candidate
- bd_fbce5c31e0a90ec7California State AGfiled 2023-01-13Verified
- bd_41d04d04e8e31ca1Oregon State AGfiled 2023-02-27(45d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-01-13-elephant-insurance-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2023
- Raw hash
- 73730c05b53a36fb4e21c532b239aafc0151ca5006bc05a80165d900d751312d
Reporting entity
- Name
- Elephant Insurance Services, LLCnorm: elephant insurance
- Domain
- elephant.com
Victim entity
- Name
- Elephant Insurance Services, LLCnorm: elephant insurance
- Domain
- elephant.com
Incident
- Discovered
- Apr 1, 2022
- Materiality determined
- —
- Notification sent
- Jan 13, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported the incident to federal law enforcementNotifying appropriate state regulatory agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 41 weeks(287 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.