HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Konen & Associates
bd_7fc29f8ed1f241bb · schema v1 · pii pii-v1
Full breach record for Konen & Associates →Unified Pain Management reported unauthorized access to corporate email accounts on March 21, 2023. The incident potentially exposed patient PII including names, SSNs, DOBs, and medical information. The company reset passwords, enabled MFA, and offered 12 months of credit monitoring via IDX.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-17-konen-associates-dba-unified-pain-management-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 17, 2023
- Raw hash
- 4b64049099bb6a2150c1f8b435b58b09566f0fb40346a477f199ab093ebe3ba8
Reporting entity
- Name
- Konen & Associatesnorm: konen associates
Victim entity
- Name
- Konen & Associatesnorm: konen associates
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- —
- Notification sent
- Aug 16, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 weeks(149 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.