MalwareRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Wellborn
bd_5e72be5884aba83b · schema v1 · pii pii-v1
Full breach record for Wellborn →Wellborn & Company, LLC notified consumers of a ransomware incident involving its third-party IT provider on August 11, 2025. The attacker accessed and downloaded data, including names and government identifiers. Wellborn engaged forensic specialists, secured systems, and replaced the vendor. Consumers are offered credit monitoring. No specific count of affected individuals was disclosed in the filing.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-10-wellborn-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 10, 2025
- Raw hash
- 1d2e948ea938624e96cd82bb4a75f26a793c24dc70efd841acfd037985f97600
Reporting entity
- Name
- Wellbornnorm: wellborn
- Domain
- thewellbornorlando.com
Victim entity
- Name
- Wellbornnorm: wellborn
- Domain
- thewellbornorlando.com
Incident
- Discovered
- Aug 11, 2025
- Materiality determined
- Oct 10, 2025
- Notification sent
- Oct 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notifying the IRSNotifying relevant state regulators
- Initial access
- supply_chain
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.