HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Earthbound Holding LLC
bd_7181d53619a11c41 · schema v1 · pii pii-v1
Full breach record for Earthbound Holding LLC →Earthbound Holding, LLC notified consumers of a data security incident discovered on December 18, 2025, involving unauthorized access to personal information including names and Social Security Numbers. The company reported the incident to the FBI, engaged cybersecurity experts, and offered 12 months of complimentary credit monitoring and identity theft protection services.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7317411df11b9522Maine State AGfiled 2026-03-12Candidate
- bd_ebe90cc16b1f983cIndiana State AGfiled 2026-03-12Verified
- bd_10189dba222d0f90New Hampshire State AGfiled 2026-03-13(1d gap)Verified
- bd_4640a5b77b35046eTexas State AGfiled 2026-03-16(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-12-earthbound-holding-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2026
- Raw hash
- ac352dc77ffb18b744237ba6b1b57c2799825354f7e84f8d0229ddbc67d3eda0
Reporting entity
- Name
- Earthbound Holding LLCnorm: earthbound holding
Victim entity
- Name
- Earthbound Holding LLCnorm: earthbound holding
Incident
- Discovered
- Dec 18, 2025
- Materiality determined
- Mar 6, 2026
- Notification sent
- Mar 12, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.