HackingDelayed DiscoveryPIIIDENTITY_BASICLowContained
RECOLOGY INC.
bd_7d36121b0e09c039 · schema v1 · pii pii-v1
Full breach record for RECOLOGY INC. →Recology notified consumers of a data breach discovered on November 2, 2023, involving unauthorized access to its computer network and acquisition of documents containing personal information. Recology engaged forensic investigators, secured systems, and notified law enforcement. Affected individuals were offered one year of Experian IdentityWorks credit monitoring. The breach impacted residents in multiple states including Vermont, Rhode Island, and New York.
Vermont clock✗ VT AG >45 bday27 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_3a2cd3add9db5541Maine State AGfiled 2024-05-07Candidate
- bd_3eaadcfebcbfe546California State AGfiled 2024-05-07Verified
- bd_3f4d21ee790797eeNew Hampshire State AGfiled 2024-05-07Verified
- bd_88bb03d1837d5ff7Oregon State AGfiled 2024-05-07Verified
Show 2 more filings ↓Show fewer ↑
- bd_eb0cec4c8fbb6fa8Indiana State AGfiled 2024-05-07Verified
- bd_fb8c0c895c8c6f46Montana State AGfiled 2024-05-07Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-07-recology-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2024
- Raw hash
- 17265fca02f16345dda0a449538a9c99c52e77439b850314fbf7685589e23e56
Reporting entity
- Name
- RECOLOGY INC.norm: recology
Victim entity
- Name
- RECOLOGY INC.norm: recology
Incident
- Discovered
- Nov 2, 2023
- Materiality determined
- —
- Notification sent
- May 7, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified law enforcement
Compliance
- Time to disclose
- 27 weeks(187 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.