Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Citrus Connection
bd_70c7c996a82a19d0 · schema v1 · pii pii-v1
Full breach record for Citrus Connection →Citrus Connection notified consumers of a cybersecurity incident involving suspicious activity in email accounts between October 3 and October 25, 2023. Discovered March 18, 2024, the incident involved unauthorized access to personal information. The company engaged external cybersecurity professionals and is offering 12 months of Experian IdentityWorks.
Vermont clock⏱ VT AG >14 bday24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-11-citrus-connection-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2024
- Raw hash
- f5a136ad2752c055375a5147e7897732a2667e75462ba63d26a4ec54a6b42d52
Reporting entity
- Name
- Citrus Connectionnorm: citrus connection
Victim entity
- Name
- Citrus Connectionnorm: citrus connection
Incident
- Discovered
- Mar 18, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.