Social EngineeringPhishingTargetedIDENTITY_BASICPIILowContained
FIRST CHURCH OF THE NAZARENE
bd_8fa3324771e1732a · schema v1 · pii pii-v1
Full breach record for FIRST CHURCH OF THE NAZARENE →The Church of the Nazarene notified consumers of an incident where an employee email account was accessed by an unauthorized person between April 19, 2024, and June 20, 2024. The breach likely resulted from phishing, leading to credential compromise. Potentially exposed data includes names and unspecified data elements. The organization reset passwords, engaged forensic specialists, and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday50 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-04-church-nazarene-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 4, 2025
- Raw hash
- cac9cc91a511cba8bd82b8935eac2ab69abd49f9782a6a36d9ae6fe807d125ea
Reporting entity
- Name
- FIRST CHURCH OF THE NAZARENEnorm: first church of the nazarene
Victim entity
- Name
- FIRST CHURCH OF THE NAZARENEnorm: first church of the nazarene
Incident
- Discovered
- Apr 19, 2024
- Materiality determined
- —
- Notification sent
- Apr 4, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 50 weeks(350 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.