AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIMediumContained
Champlain Valley Oral & Maxillofacial Surgery
bd_8857ef0ccd5b3472 · schema v1 · pii pii-v1
Full breach record for Champlain Valley Oral & Maxillofacial Surgery →Champlain Valley Oral & Maxillofacial Surgery (CVOMS) issued a supplemental notice regarding an October 11, 2023 incident where patient emails containing names, SSNs, and health insurance info were inadvertently sent to the wrong recipient. CVOMS offered 12 months of credit monitoring and identity protection services.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-18-champlain-valley-oral-maxillofacial-surgery-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 18, 2023
- Raw hash
- b86c5ce8b60889e9b62e9bb6401470d8067ab8fbf9cb8a93811f235425e6bd36
Reporting entity
- Name
- Champlain Valley Oral & Maxillofacial Surgerynorm: champlain valley oral maxillofacial surgery
Victim entity
- Name
- Champlain Valley Oral & Maxillofacial Surgerynorm: champlain valley oral maxillofacial surgery
Incident
- Discovered
- Oct 11, 2023
- Materiality determined
- —
- Notification sent
- Oct 19, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHI
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1535 Untrusted Email
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.