HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
ASMFC: Atlantic States Marine Fisheries Commission
bd_726cfd676d23a28b · schema v1 · pii pii-v1
Full breach record for ASMFC: Atlantic States Marine Fisheries Commission →Atlantic States Marine Fisheries Commission (ASMFC) notified consumers of a cybersecurity incident occurring March 14–April 6, 2024. Unauthorized access led to the acquisition of PII including names, addresses, SSNs, bank account/routing numbers, and ID copies. ASMFC engaged third-party experts, secured systems, and offered 24 months of IDX identity theft protection. No evidence of misuse was found at the time of notice.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by 8base about this victim predates this filing by 74 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_cdcd3bad1829f42fLeak Site8basefiled 2024-04-15(74d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_1488322330afd4beMontana State AGfiled 2024-06-28Verified by operator
- bd_b4fb1ab69fdd8c23Maine State AGfiled 2024-07-01(3d gap)Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-28-atlantic-states-marine-fisheries-commission-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 28, 2024
- Raw hash
- cbf8487f6730f5d36db05165dda5d20815ace9bdc349303e3aead6008e1947b1
Reporting entity
- Name
- ASMFC: Atlantic States Marine Fisheries Commissionnorm: asmfc atlantic states marine fisheries commission
- Domain
- asmfc.org
- Industry
- government_public
Victim entity
- Name
- ASMFC: Atlantic States Marine Fisheries Commissionnorm: asmfc atlantic states marine fisheries commission
- Domain
- asmfc.org
- Industry
- government_public
Incident
- Discovered
- Apr 6, 2024
- Materiality determined
- —
- Notification sent
- Jun 26, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.