Social EngineeringPhishingTargetedIDENTITY_BASICLowContained
Genex Services, LLC
bd_67a39fbd2dc3f748 · schema v1 · pii pii-v1
Full breach record for Genex Services, LLC →Genex Services, LLC notified Vermont consumers of a phishing attack on February 25, 2025, that compromised employee laptops and exposed personal information. The company engaged the FBI and third-party experts, implemented additional security measures, and offered 24 months of identity monitoring via Kroll.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_5754f2b8af0cb57bTexas State AGfiled 2025-07-10Candidate
- bd_e6724d8301e225b9Maine State AGfiled 2025-07-10Verified
- bd_6e7b15e133927c7eIndiana State AGfiled 2025-07-09(1d gap)Verified
- bd_8a7a15ccb343c3bdNew Hampshire State AGfiled 2025-07-09(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_b44cde439e08d4f8California State AGfiled 2025-07-09(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-10-genex-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2025
- Raw hash
- c0de6c8e49370c6458674ee4e7ef120c3094435c6bef69f5b7742f4f4e22de02
Reporting entity
- Name
- Genex Services, LLCnorm: genex services
Victim entity
- Name
- Genex Services, LLCnorm: genex services
Incident
- Discovered
- Feb 25, 2025
- Materiality determined
- —
- Notification sent
- Jul 10, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 weeks(135 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.