HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Ave Maria Community Care Homes
bd_88694c234b64e7d2 · schema v1 · pii pii-v1
Full breach record for Ave Maria Community Care Homes →Ave Maria Community Care Homes notified consumers that unauthorized access to certain staff email accounts occurred between October 17 and 24, 2024. The compromised accounts contained resident healthcare information including names, DOBs, SSNs, and medical history. The company reset passwords and is offering 12 months of Experian IdentityWorks monitoring.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-11-25-ave-maria-community-care-homes-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 25, 2024
- Raw hash
- 5896ffac0d8e82404145d1b3f2c608e43fd77ee885c43e485f18aabf344c7734
Reporting entity
- Name
- Ave Maria Community Care Homesnorm: ave maria community care homes
Victim entity
- Name
- Ave Maria Community Care Homesnorm: ave maria community care homes
Incident
- Discovered
- Oct 24, 2024
- Materiality determined
- —
- Notification sent
- Nov 25, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.