PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPIIIdentity (basic)LowContained

Brattleboro Retreat

bd_545c8c8c05871f24 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 17, 2024

To disclose

—

Affected

Not disclosed

Confidence

68%

Full breach record for Brattleboro Retreat →

Brattleboro Retreat notified consumers that a laptop belonging to its legal counsel, Downs Rachlin Martin PLLC, was stolen from a car. The laptop may have contained personal information including names and potentially other identifiers. A remote wipe command was initiated on April 7, 2024, but the effectiveness was not absolute. The organization offered 24 months of credit monitoring via Experian. No specific count of affected individuals was disclosed in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 17, 2024

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Brattleboro Retreat
norm: brattleboro retreat

Name: Brattleboro Retreat
norm: brattleboro retreat
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Sep 17, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Reported the incident to law enforcement
Third party: via Downs Rachlin Martin PLLC

During the incident: Reported the incident to law enforcement
Activated software safeguards to ensure that if the laptop were to come back online, its data would be automatically wiped
Reinforced with our staff the importance of safeguarding information in our possession
Worked with data privacy specialists to assist in the response
Undertook a robust effort to recreate the information potentially contained on the stolen laptop
Offering immediate access to credit monitoring and identity theft protection services for twenty-four (24) months at no cost to you, through Experian
Changes made: Reinforced with our staff the importance of safeguarding information in our possession
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-09-17-brattleboro-retreat-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 17, 2024
Raw hash: aed886dee4fbf9fc4df3d767785bac8a0f61738d5e1db1cb369f73914c84ba43

Reporting entityBrattleboro Retreat

Victim entityBrattleboro Retreat

IncidentUnknown

Stated responseReported the incident to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov