HackingStolen CredentialsTargetedIDENTITY_BASICLowContained
Caputo & Associates
bd_6bc21c8e8d64ed96 · schema v1 · pii pii-v1
Full breach record for Caputo & Associates →Caputo & Company, PC notified consumers of a data breach where an unknown actor accessed systems between March 12-14, 2025. Personal information, including names, was involved. The firm secured its network, notified law enforcement, and offered 24 months of credit monitoring. Approximately 4 Rhode Island residents were identified as potentially impacted.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3ccb16b277cba565Indiana State AGfiled 2025-04-17Verified
- bd_f9d50705392cf45eMaine State AGfiled 2025-04-17Candidate
- bd_3b632b353228c106New Hampshire State AGfiled 2025-04-25(8d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-17-caputo-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2025
- Raw hash
- acd0a7f0491c206f55bf8623ca94169bd16384b694ed295af4ed30ff546f0cc6
Reporting entity
- Name
- Caputo & Associatesnorm: caputo associates
- Domain
- cacpas.org
Victim entity
- Name
- Caputo & Associatesnorm: caputo associates
- Domain
- cacpas.org
Incident
- Discovered
- Mar 14, 2025
- Materiality determined
- —
- Notification sent
- Apr 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified relevant regulators, as required
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.