HackingCustomer Data InvolvedIDENTITY_BASICLowContained
UNIVERSAL LENDERS, LLC
bd_59557d9054371af2 · schema v1 · pii pii-v1
Full breach record for UNIVERSAL LENDERS, LLC →Universal Lenders, LLC notified Vermont consumers of a data breach occurring on November 7, 2024. Unauthorized access to files containing names and variable personal data was confirmed on December 5, 2024. No evidence of misuse was found. The company engaged cybersecurity experts and offers 12 months of credit monitoring and identity protection services through IDX.
Vermont clock✗ VT AG >45 bday11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2246d9821e08d013Montana State AGfiled 2025-01-21Candidate
- bd_9429214e64f17436New Hampshire State AGfiled 2025-01-21Verified
- bd_e62d03a0b7d28329Indiana State AGfiled 2025-01-21Verified
- bd_1cb830ed8c7ee3abMaine State AGfiled 2025-01-23(2d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-21-universal-lenders-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 21, 2025
- Raw hash
- cdf50a2f19a7a6cfb1cc02e624daa413a964bee45fb4b51815df0701c8c3783d
Reporting entity
- Name
- UNIVERSAL LENDERS, LLCnorm: universal lenders
Victim entity
- Name
- UNIVERSAL LENDERS, LLCnorm: universal lenders
Incident
- Discovered
- Nov 7, 2024
- Materiality determined
- Jan 21, 2025
- Notification sent
- Jan 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Vermont Attorney General
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.