HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Transak, Inc.
bd_761ade3211135d85 · schema v1 · pii pii-v1
Full breach record for Transak, Inc. →Transak USA LLC notified consumers and multiple state Attorneys General of a data breach affecting customer information. The incident involved unauthorized access to customer accounts, resulting in the exposure of names, addresses, Social Security numbers, and financial account details. Approximately 71 Vermont residents were affected. The company offered 90 days of credit monitoring services to affected individuals.
Vermont clock✓ VT AG ≤14 bday7 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_3419009e5cf78b81New Hampshire State AGfiled 2025-02-28Verified
- bd_81c6f6b6647441e3Maryland State AGfiled 2025-02-28Verified
- bd_ade85d7f854c6681Indiana State AGfiled 2025-02-28Verified
- bd_ffe97878a4cef686California State AGfiled 2025-02-28Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-28-transak-usa-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- ada6eb14f649ad3f64504fd36397ec71c048140cbedec7d19b77ea8091146529
Reporting entity
- Name
- Transak, Inc.norm: transak
Victim entity
- Name
- Transak, Inc.norm: transak
Incident
- Discovered
- Feb 21, 2025
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- 71
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Vermont Attorney GeneralNotified Attorneys General in DC, Iowa, Maryland, Massachusetts, North Carolina, Oregon, and Rhode Island
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 days(7 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.