Social EngineeringGovernmentGovernmentPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

The Town of Chester

bd_5d80778b97c5b51e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 28, 2025

Filed

Sep 5, 2025

To disclose

19 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for The Town of Chester →

The Town of Chester notified consumers of a data breach occurring between April 9 and April 29, 2025. Unauthorized access to the Town's email environment resulted in the viewing and copying of personal information, including names, SSNs, driver's license numbers, financial account details, and PHI. The Town retained forensic specialists and legal counsel, and is offering 24 months of free credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday19 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 19 days

discovery → filing · 19 weeks / 130 days

Apr 9, 2025

Begins

Apr 28, 2025

Discovered

Sep 5, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_0a10671fcc18b6f42025-09-05Verified
Maine State AGbd_3855e06eac1d88be2025-09-05Candidate
New Hampshire State AGbd_69809c87beb5fa422025-09-05Verified
Illinois State AGbd_1141dd060e2bd59b2025-09-01 · +4dVerified

Name: The Town of Chester
norm: the town of chester

Name: The Town of Chester
norm: the town of chester
Industry: Governmentllm

Discovered: Apr 28, 2025
Breach occurred: Apr 9, 2025 – Apr 29, 2025
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Retained legal counsel and third-party forensic specialists to investigate the unusual activity
Began a comprehensive review of the data set to determine what sensitive and/or personal information was impacted
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for 24 months
Providing proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(130 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGSep 1 · first

Massachusetts State AG+4d

Maine State AG+4d

New Hampshire State AG+4d

Vermont State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-09-05-town-chester-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2025
Raw hash: b1785f49ab0b0b30b4cd6b41cb3ef20ca5b24980263e45932f00ab9d8226ed29

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Town of Chester

Victim entityThe Town of Chester

Incidentdiscovered Apr 28, 2025

Stated responseRetained legal counsel and third-party forensic specialists to investigate the unusual activity

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov