Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
ROBINSON & COLE LLP
bd_5fb845f989c6155a · schema v1 · pii pii-v1
Full breach record for ROBINSON & COLE LLP →Robinson & Cole LLP notified consumers of a data breach involving unauthorized access to two employees' email accounts starting November 15, 2023. The incident, discovered via investigation, exposed names and data elements from one account. The firm secured accounts and launched an investigation. Notification was sent in March 2024.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0fe593ce2a129914Maine State AGfiled 2024-03-04Candidate
- bd_6e9a230221d39b54New Hampshire State AGfiled 2024-03-04Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-04-robinson-cole-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2024
- Raw hash
- 2c19c9c7cad4108b5cef7b9ee119662f80c07fa8280fcd21d2d09e161cc69c52
Reporting entity
- Name
- ROBINSON & COLE LLPnorm: robinson cole
Victim entity
- Name
- ROBINSON & COLE LLPnorm: robinson cole
Incident
- Discovered
- Nov 15, 2023
- Materiality determined
- Feb 13, 2024
- Notification sent
- Mar 4, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 weeks(110 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.