HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
The Van Winkle Law Firm
bd_68fb87e16a62bd67 · schema v1 · pii pii-v1
Full breach record for The Van Winkle Law Firm →The Van Winkle Law Firm experienced a data security incident on February 28, 2024, involving suspicious activity in its payroll software. Potentially accessed data included names, bank account numbers, passport numbers, driver's license numbers, and Social Security numbers. No evidence of actual misuse was found. The firm engaged cybersecurity experts, secured systems, and offered 12 months of identity protection services.
Vermont clock✓ VT AG ≤14 bday20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-19-van-winkle-law-firm-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 19, 2024
- Raw hash
- 5e22e2cac1a02fddfc466af4404d34963a9c6e5f1064733ecaca365c73b3d4df
Reporting entity
- Name
- The Van Winkle Law Firmnorm: the van winkle law firm
Victim entity
- Name
- The Van Winkle Law Firmnorm: the van winkle law firm
Incident
- Discovered
- Feb 28, 2024
- Materiality determined
- —
- Notification sent
- Mar 19, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.