Social EngineeringPhishingTargetedIDENTITY_BASICLowContained
Bethany Church
bd_61bc70b3f8beb28b · schema v1 · pii pii-v1
Full breach record for Bethany Church →Bethany Congregational Church notified Vermont AG of a security incident where an unauthorized actor accessed an employee email account between Oct 12-16, 2023. The incident was discovered on Feb 1, 2024. The affected data was limited to full names. The Church engaged external cybersecurity professionals and is offering complimentary Experian IdentityWorks credit monitoring to affected individuals.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_67955de864001932Maine State AGfiled 2024-03-05Candidate
- bd_f5271d9683ba1cbeIndiana State AGfiled 2024-03-05Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-05-bethany-congregational-church-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2024
- Raw hash
- 1ae98ac583d947f611b56e8161c30c261a4b0bc8ca92f8c07c4a66ab0d10809c
Reporting entity
- Name
- Bethany Churchnorm: bethany church
- Domain
- bethany.com
Victim entity
- Name
- Bethany Churchnorm: bethany church
- Domain
- bethany.com
Incident
- Discovered
- Feb 1, 2024
- Materiality determined
- —
- Notification sent
- Mar 5, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.