HackingTargetedIDENTITY_BASICCREDENTIALSLowContained
Westfield Fire Department
bd_6190194e571df5e9 · schema v1 · pii pii-v1
Full breach record for Westfield Fire Department →Westfield Fire District notified Vermont AG of a data breach occurring on Nov 14, 2024, where an unknown actor gained unauthorized access to its network. The incident may have exposed members' names and credentials. The District engaged external experts, notified the FBI, and offered Equifax credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by medusa about this victim predates this filing by 173 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-06-westfield-fire-district-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2025
- Raw hash
- 3cb31291e54fe00cfb512ad7942d31c31d49d1093578a72d557bb152ee7db26a
Reporting entity
- Name
- Westfield Fire Departmentnorm: westfield fire department
- Domain
- westfieldnj.gov
Victim entity
- Name
- Westfield Fire Departmentnorm: westfield fire department
- Domain
- westfieldnj.gov
Incident
- Discovered
- Nov 14, 2024
- Materiality determined
- Apr 17, 2025
- Notification sent
- May 6, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 weeks(173 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.