HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PIIMediumContained

Fundamental Administrative Services, LLC

bd_77eb9da16590123a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 20, 2025

Filed

Aug 15, 2025

To disclose

30 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for Fundamental Administrative Services, LLC →2 incidents on file

Fundamental Administrative Services LLC notified consumers of a security incident where an unauthorized actor copied files from its network between October 27, 2024, and January 13, 2025. Affected data includes names, SSNs, driver's licenses, financial account info, and medical/insurance details. Fundamental offered credit monitoring and enhanced security measures.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday30 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 85 days

discovery → filing · 30 weeks / 207 days

Oct 27, 2024

Begins

Jan 20, 2025

Discovered

Aug 15, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_212b6cfbed4a3a002025-08-15Verified
Indiana State AGbd_445273654278dca02025-08-15Verified
Nebraska State AGbd_9ccaf8d53f2046662025-08-15Verified
Texas State AGbd_2f89919848471f4f2025-08-19 · +4dCandidate

Show 2 more filings ↓up to 76d gap

Illinois State AGbd_7b2755440d942a9f2025-08-01 · +14dVerified
South Carolina State AGbd_b9452b16c9250e212025-10-30 · +76dVerified

Name: Fundamental Administrative Services, LLC
norm: fundamental administrative

Name: Fundamental Administrative Services, LLC
norm: fundamental administrative
Industry: Professional Servicesllm

Discovered: Jan 20, 2025
Breach occurred: Oct 27, 2024 – Jan 13, 2025
Undetected for: 85 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 15, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Worked to secure all systems
Began an investigation to determine the full nature and scope of the activity
Implemented additional technical security measures designed to prevent similar future incidents
Reviewing and enhancing existing policies and procedures
Offering complimentary access to 12/24 months of credit monitoring through IDX
Changes made: Implemented additional technical security measures designed to prevent similar future incidents
Reviewing and enhancing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(207 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGAug 1 · first

Massachusetts State AG+14d

Indiana State AG+14d

Nebraska State AG+14d

Vermont State AG+14d · this page

Texas State AG+18d

South Carolina State AG+90d

Pattern: first filing Aug 1 (IL), last Oct 30 (SC) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-08-15-fundamental-administrative-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 15, 2025
Raw hash: c63039bd924b5f6fe49786b63d6c7d55398e4089c07f6742eab0998f9244858e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityFundamental Administrative Services, LLC

Victim entityFundamental Administrative Services, LLC

Incidentdiscovered Jan 20, 2025

Stated responseWorked to secure all systems

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov