Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Plavan Commercial Fueling Inc.
bd_8c98d6397a6d81e5 · schema v1 · pii pii-v1
Full breach record for Plavan Commercial Fueling Inc. →Plavan Commercial Fueling, Inc. notified consumers of a data breach involving unauthorized access to an employee's email account between Nov 2024 and Feb 2025. The incident resulted from suspicious activity, likely phishing, leading to credential compromise. Affected data includes personal information contained in emails. The company enhanced email security and offered 12 months of Experian IdentityWorks.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_45d2b8067071147dIndiana State AGfiled 2025-06-03Verified
- bd_bf6d1d406600ae2aNew Hampshire State AGfiled 2025-06-03Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-03-plavan-commercial-fueling-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2025
- Raw hash
- e2a9c29837da4be7cd216fe707b99cdae06f7252fee92b7eaf7f5ab2081061ca
Reporting entity
- Name
- Plavan Commercial Fueling Inc.norm: plavan commercial fueling
Victim entity
- Name
- Plavan Commercial Fueling Inc.norm: plavan commercial fueling
Incident
- Discovered
- Feb 18, 2025
- Materiality determined
- May 21, 2025
- Notification sent
- Jun 3, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(105 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.