HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Stephen New & Associates
bd_6f3c210e06d2ec7f · schema v1 · pii pii-v1
Full breach record for Stephen New & Associates →Stephen New & Associates notified Vermont AG of a security incident on Oct 8, 2024, where an unauthorized party acquired electronic files containing personal information. Forensic investigation concluded May 20, 2025. No evidence of misuse found. Affected individuals offered credit monitoring.
Vermont clock✗ VT AG >45 bday36 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_40d2b6616059f60fIndiana State AGfiled 2025-06-20Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-20-stephen-new-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 20, 2025
- Raw hash
- 80acdb0dc832f062c7d73e7d00d8ec80b81b8b7aa07878cf3aed1eea9662e896
Reporting entity
- Name
- Stephen New & Associatesnorm: stephen new associates
Victim entity
- Name
- Stephen New & Associatesnorm: stephen new associates
Incident
- Discovered
- Oct 8, 2024
- Materiality determined
- —
- Notification sent
- Jun 20, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 36 weeks(255 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.