HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Cohen & Sprung Associates, LLC
bd_7663c36788b58904 · schema v1 · pii pii-v1
Full breach record for Cohen & Sprung Associates, LLC →Cohen & Sprung Associates, LLC notified consumers of a data security incident discovered on August 19, 2025, involving unauthorized access to files containing names, SSNs, driver's license numbers, medical/health insurance info, and financial account data. The company engaged cybersecurity experts, reviewed impacted files, and offered 12 months of credit monitoring and fraud assistance via Cyberscout. No evidence of misuse was found.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-06-cohen-sprung-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 6, 2026
- Raw hash
- 49f70ea4f0a28d7a4bf46fcf54a30c30cacce439394ad61c7df4b56f8dfdfb34
Reporting entity
- Name
- Cohen & Sprung Associates, LLCnorm: cohen sprung associates
Victim entity
- Name
- Cohen & Sprung Associates, LLCnorm: cohen sprung associates
Incident
- Discovered
- Aug 19, 2025
- Materiality determined
- —
- Notification sent
- Jan 6, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.