HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Westfield Fire District

bd_6190194e571df5e9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 14, 2024

Filed

May 6, 2025

To disclose

25 weeks

Affected

Not disclosed

Linked

2 records

Confidence

66%

Full breach record for Westfield Fire District →

Westfield Fire District experienced unauthorized access to its network on November 14, 2024, resulting in the acquisition of files containing personal information of members. The incident was detected and contained on the same day. An investigation by external cybersecurity experts confirmed data exfiltration. The organization notified the FBI and is offering credit monitoring services to affected individuals in Connecticut and Maryland.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday25 weeks discovery → filing

Incident timeline

discovery → filing · 25 weeks / 173 days

Nov 14, 2024

Begins

Nov 14, 2024

Discovered

May 6, 2025

Filed

This filing is one of 2 records about the same incident.View merged incident

A leak claim by medusa about this victim was first seen 142 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_05179ec24a0fce632024-11-14 · +173dCandidate

Name: Westfield Fire District
norm: westfield fire district

Name: Westfield Fire District
norm: westfield fire district
Industry: Governmentllm

Discovered: Nov 14, 2024
Breach occurred: Nov 14, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 6, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Launched an investigation with the support of external cybersecurity experts
Took steps to secure our IT environment
Notified the Federal Bureau of Investigation
Changes made: Implementing enhanced security measures to help prevent a similar incident from occurring in the future
Offering complimentary Equifax credit monitoring and identity theft protection services through Epiq
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(173 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-05-06-westfield-fire-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 6, 2025
Raw hash: 3cb31291e54fe00cfb512ad7942d31c31d49d1093578a72d557bb152ee7db26a

Linked disclosures

Ransomware claims (1)

Reporting entityWestfield Fire District

Victim entityWestfield Fire District

Incidentdiscovered Nov 14, 2024

Stated responseLaunched an investigation with the support of external cybersecurity experts

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov