HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICPIILowContained
Navvis & Company, LLC
bd_593a06ed2b96ccf5 · schema v1 · pii pii-v1
Full breach record for Navvis & Company, LLC →Navvis & Company, LLC, a healthcare management services provider, disclosed a cybersecurity incident where an unauthorized actor accessed systems between July 12 and July 25, 2023. Suspicious activity was identified on July 25, 2023. The incident may have exposed names and other PII. Navvis secured its network, launched an investigation, enhanced privacy policies, notified regulators, and offered credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_d714d292e093d169New Hampshire State AGfiled 2023-10-06Verified
- bd_094d4ec0bd999e89HHS OCRfiled 2023-09-22(14d gap)Verified
- bd_c4dec81fe3734a90Wisconsin State AGfiled 2023-09-22(14d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-10-06-navvis-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 6, 2023
- Raw hash
- bd0083c2e0be55b06b830c18ae924d9d4b37f891dcee0f62c14f870610e44ef2
Reporting entity
- Name
- Navvis & Company, LLCnorm: navvis
Victim entity
- Name
- Navvis & Company, LLCnorm: navvis
Incident
- Discovered
- Jul 25, 2023
- Materiality determined
- —
- Notification sent
- Oct 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notifying applicable regulatory authorities, as required by law
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.