HackingStolen CredentialsTargetedPIIIDENTITY_BASICLowContained
Bousquet Holstein PLLC
bd_684950ca7aa00353 · schema v1 · pii pii-v1
Full breach record for Bousquet Holstein PLLC →Bousquet Holstein PLLC notified clients of a security incident where an unauthorized actor accessed systems between Sept 25-27, 2023. Suspicious activity was detected on an employee computer. The actor likely accessed and acquired files containing client PII. No evidence of misuse was found. The firm engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday31 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1b3adac6ec3e11e0Montana State AGfiled 2024-04-29Candidate
- bd_c243ce49814f3564Maine State AGfiled 2024-04-29Verified
- bd_e391a3f7a4d01e33Indiana State AGfiled 2024-04-29Verified
- bd_ef36e2c3e73bfdeeNew Hampshire State AGfiled 2024-04-29Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-29-bousquet-holstein-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 29, 2024
- Raw hash
- 4e0f32b097418f24861757c5612de2948ee6825d7699525b60e7229b06230b78
Reporting entity
- Name
- Bousquet Holstein PLLCnorm: bousquet holstein
- Domain
- bhlawpllc.com
Victim entity
- Name
- Bousquet Holstein PLLCnorm: bousquet holstein
- Domain
- bhlawpllc.com
Incident
- Discovered
- Sep 25, 2023
- Materiality determined
- —
- Notification sent
- Apr 29, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified regulators where required
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.