HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumContained
Penobscot Wealth Management, PA
bd_80343bd962a01f7a · schema v1 · pii pii-v1
Full breach record for Penobscot Wealth Management, PA →Penobscot Wealth Management, PA notified consumers of unauthorized access to two employee email accounts between July 16 and August 28, 2024. The attacker accessed emails containing names, SSNs, driver's license numbers, financial account numbers, payment card numbers, passwords, and dates of birth. The firm secured the accounts, investigated, and offered one year of Equifax identity monitoring services.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1633b4364a7d0264Indiana State AGfiled 2025-01-07Verified
- bd_517bd528020d6abcMaine State AGfiled 2025-01-07Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-07-penobscot-wealth-management-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 7, 2025
- Raw hash
- 60ffa60715d52611a4898b4ee1720c194ce86db2bd0cc43b95db98ef7b856885
Reporting entity
- Name
- Penobscot Wealth Management, PAnorm: penobscot wealth management
Victim entity
- Name
- Penobscot Wealth Management, PAnorm: penobscot wealth management
Incident
- Discovered
- Aug 28, 2024
- Materiality determined
- —
- Notification sent
- Jan 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(132 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.