HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
US Global Mail
bd_5dcf711ae259504e · schema v1 · pii pii-v1
Full breach record for US Global Mail →US Global Mail notified Vermont consumers of a data breach where an unknown party accessed cloud servers on Feb 20-21, 2023. Exposed data included names, emails, and government IDs (driver's license, passport). US Global Mail reported to law enforcement, changed passwords, and enhanced monitoring. No specific count of affected individuals was provided in the notice.
Vermont clock⏱ VT AG >14 bday25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-03-20-us-global-mail-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 20, 2023
- Raw hash
- 79f8f4671e358e658b6dda5b23932edb6232838feb9f51b09885cb9f9b3a619c
Reporting entity
- Name
- US Global Mailnorm: us global mail
Victim entity
- Name
- US Global Mailnorm: us global mail
Incident
- Discovered
- Feb 23, 2023
- Materiality determined
- —
- Notification sent
- Mar 20, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported this incident to the law enforcement and applicable regulatory authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.