HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Alford, Holloway and Smith, PLLC
bd_686d651d7c493d6c · schema v1 · pii pii-v1
Full breach record for Alford, Holloway and Smith, PLLC →Alford, Holloway and Smith, PLLC notified consumers of a data breach where an unauthorized third party gained access to its network on February 23, 2023. The incident involved the acquisition of files containing names and other personal information. The firm engaged forensic investigators and is offering one year of Experian IdentityWorks. No evidence of fraud was found at the time of notification.
Vermont clock✗ VT AG >45 bday25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-17-alford-holloway-and-smith-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 17, 2023
- Raw hash
- 2fc0d188c7c9d7da4511ec8031efed80657dd6807997d20244cfe46138b1bf02
Reporting entity
- Name
- Alford, Holloway and Smith, PLLCnorm: alford holloway and smith
Victim entity
- Name
- Alford, Holloway and Smith, PLLCnorm: alford holloway and smith
Incident
- Discovered
- Feb 23, 2023
- Materiality determined
- —
- Notification sent
- Aug 17, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 weeks(175 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.