HackingPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
Tax Favored Benefits
bd_92bf160d8336b9c9 · schema v1 · pii pii-v1
Full breach record for Tax Favored Benefits →Tax Favored Benefits, Inc. notified consumers of a November 30, 2022 incident where an unauthorized actor accessed an employee email account via phishing. The breach potentially exposed names and other personal information of customers. The company engaged forensic specialists, secured systems, and offered credit monitoring services. No evidence of identity theft was found at the time of notice.
Vermont clock✗ VT AG >45 bday15 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8b799c442acac40fIndiana State AGfiled 2024-02-14Verified
- bd_de5e8d2f2e613a75Maine State AGfiled 2024-02-14Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-02-14-tax-favored-benefits-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2024
- Raw hash
- 589fba17d554a2d60c43e951b85ac4a80a04f49b2362f5c9a1e1a2812aacb72e
Reporting entity
- Name
- Tax Favored Benefitsnorm: tax favored benefits
Victim entity
- Name
- Tax Favored Benefitsnorm: tax favored benefits
Incident
- Discovered
- Nov 30, 2022
- Materiality determined
- —
- Notification sent
- Feb 14, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- notify applicable regulatory authorities where necessary
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 months(441 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.