MalwareRansomwareData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
MDG Design and Construction
bd_612326c42faad2c5 · schema v1 · pii pii-v1
Full breach record for MDG Design and Construction →MDG Design and Construction LLC notified Vermont consumers of a ransomware attack discovered on April 25, 2025. The company secured systems and investigated but could not confirm if personal data was accessed. Potentially affected data includes names, SSNs, driver's licenses, financial accounts, and medical/insurance info. No misuse confirmed.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a82f60548c7baa69Maine State AGfiled 2025-05-28Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-28-mdg-design-and-construction-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2025
- Raw hash
- a08599b5e0bc00b708503cd2c229c26a7a9529c72190d378cf59282394e1609a
Reporting entity
- Name
- MDG Design and Constructionnorm: mdg design and construction
Victim entity
- Name
- MDG Design and Constructionnorm: mdg design and construction
Incident
- Discovered
- Apr 25, 2025
- Materiality determined
- —
- Notification sent
- May 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.