HackingStolen CredentialsTargetedIDENTITY_BASICLowContained
Dohman, Akerlund & Eddy, LLC
bd_920cf2f609abf05c · schema v1 · pii pii-v1
Full breach record for Dohman, Akerlund & Eddy, LLC →Dohman, Akerlund & Eddy, LLC notified consumers of a data security incident occurring on February 28, 2024. Unauthorized acquisition of files containing personal information (names) was determined on September 26, 2024. The firm engaged cybersecurity experts, secured the network, and offered complimentary credit monitoring and identity theft protection services through IDX.
Vermont clock✗ VT AG >45 bday32 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5544cb31988540e7California State AGfiled 2024-10-07(1d gap)Candidate
- bd_62e3ac007382ffa6Maine State AGfiled 2024-10-07(1d gap)Candidate
- bd_6393d4c2cd940089Montana State AGfiled 2024-10-07(1d gap)Candidate
- bd_db3e7c91bb29fd71New Hampshire State AGfiled 2024-10-07(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-08-dohman-akerlund-eddy-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2024
- Raw hash
- a33dd3fd77219a9d63b17700de660cc238d6cd2205067332a14474c9f065539a
Reporting entity
- Name
- Dohman, Akerlund & Eddy, LLCnorm: dohman akerlund eddy
- Domain
- daecpa.com
Victim entity
- Name
- Dohman, Akerlund & Eddy, LLCnorm: dohman akerlund eddy
- Domain
- daecpa.com
Incident
- Discovered
- Feb 28, 2024
- Materiality determined
- Sep 26, 2024
- Notification sent
- Oct 7, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 32 weeks(223 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.